yeah, that was my edit but I realize I didn't actually clarify that just what it was doing. But it then will just claim your account has been compromised until you give them a number :D

You can bypass that second screen as well (or at least, it let me do so for my account).