Two-factor would also help. Even if it's manual, expensive "CC vendor calls each cardholder who makes a large credit card transaction before clearing it" style

Two-factor would also help. Even if it's manual, expensive "CC vendor calls each cardholder who makes a large credit card transaction before clearing it" style efforts, which bankers at least understand.