Paypal's anti-fraud software seemed to do something like this:

    if (rand() >= 0.5) {
        lock_account()
        freeze_balances()
        require_many_long_phone_calls()
        require_intrusive_amounts_of_scanned_documents()
        refuse_to_unlock_account_and_steal_account_balance()
    }