I got challenged with a security question from 5 years ago.
When I contact support like it says, they ask for - guess what? Your account information!
Umm, that info is...in...my...account page.
You know, the reason you ask for 2 security questions is so that one is a backup to take care of vagrarities of spelling, whitespace, capitalization, etc.
If you are going to hit people with both, then they are effectively passwords, and should require two entries just like passwords.
If you are going to lock people out, give them a way to cancel autobilling, which is far more a legitimate business practice than autobilling fraud.
Finally, if you are going to do something like this, actually have some, any, kind of support.
At least foolishness like this is its own reward for such companies. They end up alienating a large part of their subscriber base and word does get out.
Signed,
Accountants are out of control.
--and--
You just lost 2 more accounts.
