Equifax is switching the method used to authenticate users, from a Knowledge Based Authentication/OTP authentication to an DIT (Digital Identity Trust) + SMFA(secured multi factor authentication) link.
SMFA SMS link expires after 4 minutes so we need to design the SMFA Timed out experience. Getting them to resend SMS link is the primary call to action but we should provide a way out if they get stuck in a loop, KBA.