Yeah, but from a business perspective, they're definitely losing clients with this approach.
I get that they want to avoid abuse, but this whole random verification thing is frustrating for legit users.
They should really consider a smoother, more consistent system to keep people happy without sacrificing security