Do you handle those manually? Seems like it could be tedious if you are. Or do you use some other method to help automate it?
I may actually take you up on this myself. I had someone break into one of my exchange accts in the past and they were nice enough to cancel the attempted withdrawals and lock the account down from withdrawing until I personally requested (and verified my identity) to do so. In the case of JD, I think this may be something I'll do, if you are up for taking a custom request (i.e., "here's the hash of the codeword. Don't allow withdrawals unless I provide that hash to you" or something along those lines).
I handle them manually, and it is getting a little tiresome. Especially when people keep asking for me to lift the self-imposed restrictions early.
At JD you can already use 2FA to lock down individual actions, such as 'divest' and 'withdraw'. But I can set your account such that you can't divest at all without going through me, and providing the codeword for example.
The problem with that is what do I do when you contact me in a year claiming to have forgotten the codeword?