> I find authentication the least problematic place where risk based on ip is used. I’m not an expert on Risk Based authentication, but your Etsy example sound

> I find authentication the least problematic place where risk based on ip is used. I’m not an expert on Risk Based authentication, but your Etsy example sounds exactly like RBA. They use IP address as a factor in determining the risk associated with allowing the login, and suspend accounts with random IPs to prevent the “attacker” from wreaking havoc. RBA: https://en.wikipedia.org/wiki/Risk-based_authentication https://en.wikipedia.org/wiki/Risk-based_authentication