Everyone should get the token app's for android or iOS. Everyone has a smartphone now days. Better safe than sorry. As for the ip check, people like this use proxies most the time so it's harder to tell.