Keeping Out Fraudsters, Not Customers