I have configured MaxMind to screen all orders. I have not enabled the phone verification feature, as I don't see a use for it currently. The only time I call to verify an order is when a dedicated server is purchased. If I see an order that could possibly be fraudulent, I usually do a whois on the domain and see if 1) the domain exists and 2) if the account holder is the legal registrant of the domain.