Evaluates if the user currently possesses an unexpired, unused OTP for this purpose. If yes, it returns the existing record. If not, it executes a live upstream API handshake with Trustgate to generate and dispatch a new OTP to the user's email address, storing the trackable database record.