Which other companies? How did they solve the problem?

If you involve a human, you're going to get socially engineered. It's not a question of "if", but "when" - especially if you're a high-value target where user accounts are valuable.