this can be optional and can add more security to the accounts
here i got some concepts
Phone verification is inherently insecure. Please use our TOTP two factor authentication instead.