Most of the banks uses OTP (One Time Password) to enrich the authentication through dual factor.
But I observed Banks are sending the OTP to mobile as well as email.
I suppose sharing passwords on email is not secure and it's not a recommended practice by Information Security experts.
Below is the sample email I receive with the OTP to mobile:
Is my OTP is not secure due to bank practice? Or Am I missing something here?