wonderful...
"We will not contact you by phone and ask for your password - please do not reveal your password to anyone claiming to be from British Airways. If you need to contact us, you can do so via our contact centres."
i got a text with the verification. thats a contact by phone.