Finally, I just received an OTP message that said it will be expired in 10 minutes.

Funny part is that i was trying to login 2 hours ago at thier(new client) platform to review.

And they said it is fully functional and you will have to fix some minor issues only.

I am thinking this way( it is so secure that you received otp only after it is expired).😅

Imagine you're a hacker, you already went through all the social engineering calls and even managed to somehow infect the poor guys phone and steal his OTP secret key and then you finally try to login and just wait for the OTP response... and nothing happens... You double and tripple check everything, and you feel defeated because you must've made some small mistake, only to receive the code 2 hours later