Looks like 2fa wont do much against fishing attacks.