Isn't that what PINs and signatures are supposed to be for?