The human side to this solution is worrying though. You have an app designed to save you time, and in any such app people will train themselves to “just click i

The human side to this solution is worrying though. You have an app designed to save you time, and in any such app people will train themselves to “just click it to get it done” almost like a reflex. And so that attack could easily get unnoticed. You probably need the solution here along with some other heuristics to detect fraud or scams. e.g. If a friend sent you an email that scores low on how likely it is that they wrote it based on the content then display a red warning and a hidden OK button ala SSL alerts. For dangerous actions like sending money, delay by 1 hour and send a second factor confirmation that says “you will send money ensure this is not a scam” and only when more questions are answered is it done.