While in sandbox the OTP is always 6 zeroes '000000' to ensure you can create multiple test cardholders with different phone numbers for each.
Creating cardholders in the Demo app
Testing user verification in sandbox
Once your program is in production, SMS messages will be sent automatically in order to verify the user.
Creating a new user with the Mobile API