One-time passwords raising concerns over phishing attacks, SIM swapping