You could make an endpoint that generates a six digit number, emails it to them, and returns it back to the assistant. The assistant could then ask them for the number and then wait to proceed until they say it correctly.