Not really a big deal unless you're trying to hide your true identity.
Just because they have your credit card and billing info doesn't mean anything. You could have faked that, stolen it, whatever, the same way scammers generate signups to sponsors with fake/stolen card numbers.
If that was the case then whoopie, they'd be out one month's hosting bill, no biggie.
But I can understand them wanting verification of who you are before you get shell access to a server that you have a virtual account on.
On another note, WTF are you doing with a virtual account anyways? Servers are cheap, get your own and then you can do whatever the fuck you want with the box, AND you don't have to worry about some other knucklehead with shell access fucking up your sites.
