We will be asking our users to generate an account verification code that will be texted to them in order for them to sign in (as an alternative to emailing a password reset link). How many digits of the (mainly UK) telephone number can you show (so users can tell it's the right one), without compromising security? I have seen this on other sites:
07*****1234