One SMS OTP expires in five minutes; a USSD OTP may expire in ten.