The system can be configured for the desired number of attempts. For E.g. a validated user who gets rejected can be allowed for 2 more attempts or re-directed to the OTP pin generation or to speak to a customer service desk. It can be configured to give 3-5 attempts for re-authentication.