The CFO was on the call. You just say "cool I'm sending a 4 digit code to your mobile phone, read it back to me".
I fthe CFO gave a number on the call, it wouldn't also be much of a check.
I think the real improvement would be to have the CFO file a ticket, but obviously that company was used to play it loose and fast.