Beyond 2FA, some type of chaumian cash like https://taler.net/en/ https://taler.net/en/ might help too. But the problem is really downgrade attacks. There are

Beyond 2FA, some type of chaumian cash like https://taler.net/en/ https://taler.net/en/ might help too. But the problem is really downgrade attacks. There are multiple payment systems (bank wire, check, credit card ) and if there is one insecure way to make payments, then the whole system is broken.