♲ @shs96c@twitter.com: Call @virginmedia on a number on their site. Get told that their policy is to always perform the security challenge, even if they're the ones who called. They have no mechanism for the person receiving the call to verify that it's actually @virginmedia calling.