On a side note, situations like this should be taken into account when designing access control schemes and it's an excellent argument for NOT using phones or o

On a side note, situations like this should be taken into account when designing access control schemes and it's an excellent argument for NOT using phones or other devices for authentication. I don't really have a better suggestion, but as more and more people from non-Western countries establish an online presence, many things that used to be taken for granted will no longer be applicable. "Everyone owns their own phone" is up there, along with "all names can be written in ASCII", "personal names always come first", "everyone has an address/a personal email account" and "everyone uses the Gregorian calendar".