Singapore banks phase out OTPs for online logins to combat phishing. Digital tokens to become mandatory within 3 months.