Not relevant to this specific case, but: For smaller companies I've found that "I got your phone number from your domain whois" is a very effective shibboleth.