Couldn&#x27;t customer service just treat all sensitive information like the they treated the last 4 digits of the CC in this scenario? Verify only, reveal nothing. I&#x27;m sure almost all legit customers don&#x27;t have even 5 possible addresses they may have shipped to, make them say what they think it is.