It makes literally 0 sense to force 2FA upon people. Big annoying warning that says "2FA is very recommended" it's ok, but not forcing it, there is a reason no exchange does that. I use public numbers to bypass SMS verifications all the time myself because there's no reason you would need to give personal data at that level to do that. Again, there's a reason you don't need phone verification in any exchange to log in and do basic alt to alt trading. Of course, when fiat is involved, it's normal to start wanting more credentials, but forcing people with phone verification alienates people to use your service.
If you live in a third world country, or lets say you don't have a smartphone (a LOT of people still don't), you can't use Google Auth which leads to being forced to check your phone every single time you log in. This is a big no-no.
Reconsider how you run this.
How does it 'literally make no sense'? It literally
does make sense because people lose their coins all the time and as soon as they do they bog down support with complaints asking where their coins have gone. And who are these people in the third world that don't have a phone but yet have the internet, computer and are actively involved in the crypto community?
Your phone is really more like your password then it is a 2fa device. If you forget your password then you can reset it using your phone only, so there is really no point in even requiring people to have a password at all in the first place.
Requiring people to receive their payments via an exchange account also makes little sense when you have a escrow paying participants. There wouldn't be anything to stop the exchange from seizing funds that participants receive prior to them being able to withdraw which defeats the point of using escrow in the first place.
It would make more sense to decrease rates by 0.5% and allow people to receive payment to any address that participants wish. Then people would not need to worry about accidentally eating the only way they can access their account
Yup, that's another thing. Receiving your payment directly in your BTC address is always a peace of mind. That, coupled with the forced 2FA thing is annoying. As far as I know, only this and Bitmixer offer automated payments. Too bad Bitmixer's payment's rate is shit and the rest are still stuck in the middle ages with the manual enrollment mess. Hopefully in the future someone hits the sweet spot with direct payments in your address, good rates and not compromising your privacy in the process.