Why do I need a one-time password (OTP) to complete a withdrawal request?