Why don't you have a chat and 2 factor authentication? Chat maybe leads to even more phishing but fun to brag about wins and troll.