Answered on October 23,2019
Merely knowing your mobile number doesn't allow anyone to operate your account. He needs to have access to it when he does the transaction to receive the OTP.
In addition to it, he needs to know your username and password to transfer money through internet banking. If he is using your card, he needs access to your mobile at that time to receive the OTP to reset the PIN.