Actually, yeah, you get an email in 2.0 if someone attempts to log in from another IP. this already exists.

Yeah, and the people who got their accounts stolen? Tried to buy gil, either did buy gil, or did something they shouldn't have.