O2, I was victim of fraud today, and they were able to change my
username / email address. When someone updates their username or email
address, could you ask them to provide their current password? And also
what about offering a two factor authentic...