The State and Future of Remote Authentication Fraud