So much for security?

<p>I apparently just completed an online transaction for 62.70 pounds without having to enter a one time OTP. A one time OTP was requested but not received by my cell phone. I clicked on the online option that says "resend OTP" and voila, without receiving an OTP the transaction was approved. I then phoned in to Virgin Money to see if the transaction, which I wanted to happen, had indeed happened. After answering a battery of exhaustive security questions I was informed that uthe transaction had taken place. My point is this, although I wanted the transaction to take place it happened without the prerequiste OTP unlike a general phone in inquiry, which requires answering a battery of security questions before one can proceed with a query and that involves no money. Something doesn't seem to be correct?</p>