This could also have been done using a simple OTP and on the number.