End-to-end connection secured. All OTP requests are strictly processed only if the account exists in the database and has been manually approved by the Admin.