I'd have been even more anxious if the workaround for the missing OTP was him saying "trust me, I'm the manager, the customer is very upset" or some other thing that's trivially socially engineered by a competent scammer...