A user account will be protected by two-factor authentication with a strong password(2FA is out of scope for MVP). All users need to identify themselves by going through the KYC procedure in order to receive TKLN tokens.