We just got a failmail from a donor with a legitimate looking 35 character first name (multiple first names, but still OK). That passes our local validation but not their remote validation.