

Payment info is a good use case for 2fa though. Personally, I use vaultwarden to hold my payment details. Open source and I choose my log in requirements, although 2fa is required at least once. From then on, fingerprint on my phone is fine or pin on a browser.
I don’t know that the influencers.would have enought resources or influence to do that. So start with them and if they don’t want crazy fines, they need to provide who paid them. Obviously the media companies they appeared on should be fined too.
If the companies promoting poker machines through illegal means are named, one option instead of a fine would be licence lost due to breach. Some of the biggest gambling companies like Star and crown have faced lost licence and fines. More follow through will help regulate. If some fail, it’s no loss and a warning to others.
For companies that repeatedly breach, criminal prosecution of the people doing so is probably better than fines.