How many times can a customer enter a PIN code?

By default, a customer can make three incorrect attempts before the PIN code/OTP becomes invalid. This can be configured as well according to the tech documentation, which can be accessed here.

This limit ensures that there is no brute force to reveal the actual OTP that was used.