Real-World Example
Jane signs in from a new link and the portal sends a one-time code. She enters the code, the portal confirms it belongs to her current profile, and only then shows her account offers. If she selected an account contact or entered a different email or mobile during login, successful verification also promotes only that verified contact to her master EcoAddress.
Visual Flow
How It Should Work
- It should validate the OTP against the current consumer and requested verification type.
- It should update the master profile only when a staged account contact passes OTP verification.
- It should allow resend behavior without creating duplicate account access.
- It should move the consumer forward only after successful verification.
How It Should Not Work
- It should not accept expired, reused, or mismatched codes.
- It should not change the master email or mobile after an incorrect or expired code.
- It should not verify one consumer by using another consumer OTP.
- It should not reveal protected account details after a failed code attempt.
Last modified on August 15, 2026
