A few years ago I ran into a problem logging into a bank website, and one of the things they wanted from me to verify my credentials was (literally, I'm truly not making this up) the reference number on a *letter* they had sent me 6 (six) years prior.