Consumers have long been familiar with SMS-based one-time-passwords (OTPs) as a method of authenticating transactions and account activities. Its duration in the market, however, has exposed itself to new vulnerabilities that were previously unconsidered.