I was able to buy the physical tokens from the US and have them shipped to Europe. Then when they let you use the phone authenticator (microsoft or google), I switched to that.