If someone calls claiming to be from IT, tech support, or a bank and asks for sensitive information, treat it with suspicion. Legitimate organizations rarely ask for credentials or account details over the phone.