How the f*** is this still happening? This just happened to my father. Emptied his bank account. He assures me he did not disclose the authentication code that was SMS'd to him, yet somehow a new beneficiary was added and all his funds transferred out.