WIRE PIN authorization procedures

We recently had an online banking security breach, due to the "bad guys" obtaining member info from outside sources, registering a member on online banking, and calling in (with all proper ID) to request a wire out.  Our procedures permitted the first time phone request for a wire to not need a PIN.  We no longer allow first time call- ins to request without a PIN.Members are now asking if they can email us to set up the PIN Authoriztion form and not have to come in and sign in person.  Do you permit this?  Are there other issues to include in revising our Wire Policy and Procedures?thanks for any assistance.Sherry Wenger,Auditor/Interra Credit Union/[email protected]