I recently had you guys change my e-mail because for whatever reason MY Yahoo.com account doesn't like to let e-mails from what appears to be only Bitcoin related e-mail like CEX...... Getting them to change my e-mail was a PAIN, much more then it was PBmining which I appreciate. As long as people that end up in a situation such as mine or something close to that nothing shady are able to change theirs, I see no issues.
I do agree with others that we need 2FA. I'd say to lessen the burden on you, do 2FA and allow customers to change their passwords and payout requiring 2FA, that should lower the bogus/fraudulent support e-mails. Just my opinion....
I believe you have hit the nail on the head here with a very relevant issue. I've been dealing with all morning with a yahoo e-mail registered PB Mining user not being able to make changes with his account. His Yahoo address was not receiving any password/address confirmation e-mails.
And then I came across this:
http://blog.bitbargain.com/post/65398682572/do-not-use-yahoo-for-mailYup, Yahoo! is no bueno...... It's sad that companies like Yahoo! are pulling these kinds of shenanigans......