OTP verification is the last step of any online transaction. So, if someone has access to your card or internet banking details, then the person will be able to transact using the OTP you share. Therefore, it is critical that you don’t disclose the OTP sent to you on your email or registered mobile number.