+1 to the enhanced security measures. They should be able to assign a special passcode or something that only you would know. Also you should set up notifications for everything on your account so that you get a SMS or email anytime there is a charge or change or event with your account.