&gt; On the other hand, 2FA opens up the &quot;I lost my phone&quot; customer support channel which might be just as weak.<p>&quot;I lost my phone&quot; (or &quot;my phone stopped working&quot;) does need some solution, though.<p>The right way to handle &quot;I lost my phone&quot; seems like one of two possibilities: either come into a branch and provide legal identification matching what you used to open the account (and get &quot;yourself&quot; on camera doing so), or have a token mailed to your physical address on file (which you cannot change at the same time as a lost phone claim).