or spend more money and pass all my biometric details from my passport to some muppet in a call centre and risk identity fraud
Did you use your work IP? If so, knowing where you used to work and assuming you still work in similar, it may be that. Or did your cookies raise a red flag? They don't like 3rd parties!