There have indeed been issues of identity theft here in Sweden where the thieves ordered a new login to the 2fa app and then managed to get hold of it from postal offices with bad verification processes.

So now the practice is to fetch the credentials from the nearest bank office or something like that.