> have a random step after sign-in that asks for a single piece user information

I think being asked a different question next time might ring alarm bells for me, have me double-checking I hadn't mis-spelled the domain.