I'm calling into question the whole lot. The method about which ocuk went about asking for this verification and the actual security benefit of asking for the information in the first. Not to mention is it all worth it to piss off customers.