Bank OTPs were sent to duplicate SIM card instead of real one, audit company loses Rs 79 lakh; Bank of India ordered to pay Rs 1.5 crore