that sucks. this is one of the fears that drove me to take the refund before WEX launched, even though i knew i was likely giving away a lot of money. maybe you could try selling the account on the digital goods subforum ... maybe a non-US person would be willing to verify. but you'd have to take a big pay cut.


2FA =/= outsourcing security to a third party. a TOTP token is generated by the service provider only once. after that, the codes can be generated by any number of authenticator apps. you can have multiple authenticator apps on each phone, tablet, etc, so you don't need to rely on any one third party. just like a private key, the user has access to the token.

the main problem here is that users don't take 2FA seriously. they quickly put the token on their main phone without backing it up anywhere, then they cry when they lose their phone. one should always have tokens backed up on multiple devices, and written down on a piece of paper as well.