receiving, by one or more processors, from a computing device associated with a user, an indication of at least one one-time passcode (OTP) data item including particular OTP and a time duration of validity of the particular OTP;

utilizing, by the one or more processors, a trained OTP protection machine learning model to determine one or more phone numbers as presenting a security risk with respect to the at least one OTP data item based at least in part on the particular OTP;

instructing, by the one or more processors, the computing device to update a contact list with an indication that the one or more phone numbers present a security risk with regard to the particular OTP during the time duration of validity of the particular OTP; and

instructing, by the one or more processors, the computing device to commence at least one security measure for an incoming call from the one or more phone numbers during the time duration, based at least in part on the updated contact list.