OTP protected flow verification