Mike should have tried what the banks do over the phone...
"If I give you a piece of information about your account, you then give me the next piece of information..."
In my case it was "ok the first part of your postcode is ..." "Ok what is the rest of your postcode?" which is the point at which I told him I didn't want to play that game.
What Mike could have done using that technique though would be to proffer the Monitor Asset Number and then ask for the one on the box below.