YSK Never tell anyone the onetime passcode that is sent to you via text or app
Why YSK: Scammers are calling and sounding very convincing that they're calling you from the company because of suspicious activity and you will receive a OTP as a way to build their legitimacy, but what they're actually doing is attempting to log into your account and when you give them the OTP then that's the last hurdle and they're in.
It doesn't matter if it's PayPal, Amazon, Google, your bank or credit union, insurance company, NEVER GIVE OUT THE ONETIME PASSCODE that is sent to you. That is only for you to type in, EVER.