According to bankers, "social engineering" scams that include tricking a customer into disclosing their password or getting it through a SIM swap can also involve OTPs. An authenticator app that needs the user to get a password from another phone app is the most popular substitute for OTP. In addition, service providers have created alternative possibilities, such as tokens inside the mobile application. Although this proves where the communication originated, it still has to rely on mobile phone.