Kerala High Court directed SBI to refund ₹3.73 lakh to a retired college principal who lost money after sharing an OTP with a fraudster posing as a bank official. Here is how the scam worked, five lessons every bank customer should take from the case, and what the RBI’s zero-liability rule says.