3 ms·

I suppose if the authentication is strong enough then they can claim any fraud that happens to be user-responsible.