"It requested me to first confirm my account ownership by filling in all of my personal data, including my mother's maiden name, SIN and credit card number, expiration date and verification number." . . . . . .