do not reveal the complete recovery email/phone number when reverifying
These should be partly hidden, and not all visible.
If someone got my password, they will see these and will know what to hack next (secondary emails and contacts).
Other email providers have these partly covered with asterisks and only showing the first and last character.
This is one of the primary reason I dont use AOL frequently (only for non-critical subscription and trials), other than that, ALL SPAMS.
I'm sorry to hear you're experiencing this issue and I'd like to look more into it to help, please contact us on Twitter at @AOLSupportHelp or on Facebook at our AOL Customer Care page. If you do not have a social media account, we are available at help.aol.com.