I don't get this one.

Banks say they sent OTP but the victim say didn't receive. So can say also maybe victim play dumb.

But bank don't want to say who receive the OTP to protect privacy which is fair. But that means someone else and not victim receive OTP isn't it? If it was the victim who got the OTP then bank would say send OTP to victim correctly. So victim lie la then

Also, if the detail for OTP suddenly changed to scammer, then shouldn't the victim receive notification of changes? Which shitty bank no notify of detail changes?