The scratch codes should be provided with a time stamp, and the box asking for a token should also provide the timestamp for the last set of scratch codes. That would make it easier to figure out why the scratch codes does not work.
Something like
2019-09-27 AGFJ LKJH DSUH UBLT …
And then a message under the text field reading “Scratch codes provided 27th september 2019”.