Data are now checked before any OTP or URI generation