Three UK nationals have pleaded guilty to operating otp[.]agency, a notorious online service that intercepted one-time passcodes (OTPs) to facilitate online account takeovers. Launched in November 2019, the service allowed scammers with stolen bank credentials to generate automated calls to victims, tricking them into sharing OTPs sent via SMS. These intercepted codes were then relayed to scammers, enabling unauthorized access to victims' accounts.