diff --git a/api/config/environment.cfm b/api/config/environment.cfm
index 991bfbf..45c3589 100644
--- a/api/config/environment.cfm
+++ b/api/config/environment.cfm
@@ -43,11 +43,11 @@ application.emailCatchAll = isDevEnvironment ? "dev-emails@payfrit.com" : "";
 application.emailEnabled = !isDevEnvironment ? true : false;  // Disable emails on dev entirely
 
 // ============================================
-// MAGIC OTP (for testing / App Store review)
+// MAGIC OTP (for testing)
 // ============================================
-// Enabled on both dev and production for App Store review
-// Code 123456 will work for any phone number
-application.MAGIC_OTP_ENABLED = true;
+// Dev: Allow magic phone number to bypass OTP
+// Prod: Disabled
+application.MAGIC_OTP_ENABLED = isDevEnvironment;
 application.MAGIC_OTP_CODE = "123456";
 application.MAGIC_PHONE_NUMBERS = ["5555555555", "0000000000"];