A banking playbook for sms otp replacement using passkeys, carrier SIM verification, and safe recovery flows without code fallback.