Can you make your apps and services more secure. They get hacked all the time.
Offer an Authenticator or other forms of 2 step verification with a fail safe back up code when all else fails. Such as in the case of hackers changing all notification methods when they’ve taken an account over. Such as an 8 or 12 word phrase written down. Then you ask for the 3rd, 6th snd 10th word. That’s proof of ownership that’s hard to beat.