Handling parallel login and Max invalid attempts using OTP with same phone number

Question

I am designing a login system that performs login operation using OTP and Email ID of the registered user.

The current approach is as below