I'd be less inclined to give my phone number to a random shop on the Internet myself. Regarding access to the old invoices, maybe ask for the zipcode instead o

I'd be less inclined to give my phone number to a random shop on the Internet myself. Regarding access to the old invoices, maybe ask for the zipcode instead of a password? (my local post service does that to track a parcel for example)