I encountered this last week. They want to send you a verification code are an email or phone# on file already. You choose. I chose email and their email with the code appeared in my TRASH folder, not Spam. Then you enter the code in the box waiting on the Amtrak website and you're good to go.