Financial institutions have two distinct OTP bot problems in 2026. The first is operational: attackers are using automated social engineering to bypass two-factor authentication and access customer accounts, payment systems, and internal platforms. The second is regulatory: the controls being bypassed are the same controls that DORA, PCI DSS 4.0, PSD2, and FCA operational resilience … Continue reading OTP Bot Attacks in Financial Services: the Regulatory Exposure Most Compliance Teams haven’t fully mapped