otp.locked
Too many wrong codes: one-time codes are locked for the delivery for 24 hours.
Receiving it
Subscribe a webhook endpoint to otp.locked, or to every type. Check the Parasend-Signature header before you trust the request (see Receiving webhooks), answer 2xx quickly, and fetch the resource for its current state.