Country Wise Restriction in OTP Widget?

There is a Country-wise Restriction option in the OTP widget, which is a very useful feature to prevent bot attacks. Using this, you can block requests from specific countries.

Example: If you know the attacker is from X, you can restrict that country so that any OTP request originating from X will be blocked.

By Default it will be allowed All and you can add moderate countries into it.

What is moderate countries?

Not all submissions will be blocked if you add a country to the moderate list. The logic works in a way that only suspicious requests will be disallowed by the system.

Allow Specific:

You can add the countries which you wish to allow to made the request.

Disallow Specific:

You can add the countries which you do not wish to allow to made the request.

Note: Once this feature is enabled, if anyone tries to request an OTP from a disallowed country, they will receive an “Invalid Request” error.

By default below countries are blocked for the request due to a high number of spam being identified from these countries, you need to specifically add the following countries to allow traffic if you wish to allow the request:

Pakistan
Nigeria
Bangladesh
Egypt
Iran