Send verification PIN to requesting customers by email

Account requests lack quick identity checks, delaying changes and increasing social-engineering risk. It emails a one-time PIN and appends a verification note so agents can confirm identity same day.