OTPs are typically sent via SMS, email, or through an authentication app like Google Authenticator.