Users should confirm withdrawal details on a second device. However, this method is cumbersome and often skipped by users.