Hmmm. Good point if Stripe use 2FA even if it would still be harder for the attacker as they would have to correlate payment - sms - account created - account joined group which is significantly harder to do than what is happening currently.

I guess what they'll do instead is to just outlaw Telegram :-|