The only way to prevent this is to do in-person only, but that's another can of worms.
Heh, maybe we need to make a 2FA device with biometrics and GPS, where it's setup in person the first time.
Heh, maybe we need to make a 2FA device with biometrics and GPS, where it's setup in person the first time.