... or just get an authenticator and not have to worry about any of that, ever.
Blizzard should just make it so that in order to use the Real Money Auction House, you need to have an authenticator attached. Then every transaction must also be authenticated, as well. I mean, they're trying to kind-of force the authenticator on everyone; just make it official already and turn it into a requirement to use the Real Money Auction House. Then Blizzard doesn't have to do so much to try and restore all these compromised accounts because of the rush to make/spend cash.