This is SEBI regulation that account must get locked when customer put three time wrong password in trading system.
Ideally, when customer is not able to login from password he is putting in two attempts, he/she must use the option forget password.