Dodgy security code sent, but not asked for or needed.