To curb OTP misuse, India’s government has proposed changes in its Telecom Cyber Security Rules. While the intent is fine, it could make compliance difficult and expose users to other risks. We must weigh the likely benefits of a shift against its potential costs.