Did the OTP message they sent you state that this code was specifically to authenticate on the phone?

If it did and even included details like the person‘s name, that would make me feel safe. If it’s a generic OTP that could be used to log into my account or reset its password, though…