Aaron Brogan, a crypto industry lawyer, said that hypothetically, a company could strengthen IP address blocks by incorporating GPS data from users’ mobile devices, “but this might be impractical in commercial use.” A customer using a laptop without a GPS, for example, might have a hard time logging on without two-factor authentication.