that may not be ideal. most people keep their sms history, so the person trying to use the service in my behalf could just scroll the screen. or do you mean some sort of one timer passcode? that could complicate things a bit, not sure how it could work