Only 3 login attempts available per hour, and 10 login attempts available per day for a phone number. Also, login attempts are limited for an IP address. OTP login and Password login share same attempt count. Account will get blocked on repeated login-attempts.