You must immediately visit your bank to disable OTP via SMS and switch to OTP via email. You are also suggested to change your email password as well.