For my bank it is: - Log in: Two factor authentication based on chip card / chip card reader [1] with 4 digit PIN attached to card. - 3 wrong PIN attempts blo

For my bank it is: - Log in: Two factor authentication based on chip card / chip card reader [1] with 4 digit PIN attached to card. - 3 wrong PIN attempts blocks card, and requires phone unlock - The 'call' is secured by asking you the typical weak questions that are easily guessed - each transaction requires using the same device to generate an 8 digit electronic signature You could argue the 'security questions' part is weak, but I guess in the context of the process (buying you another 3 attempts)it's an ok'ish trade-off. We have come a long way since the first 'Phone Banking' where all that was needed to access the account and make whatever transaction was punching in a 4 digit 'password' on a tone-dial. [1] http://c621460.r60.cf3.rackcdn.com/Kaartlezer---kaart.jpg http://c621460.r60.cf3.rackcdn.com/Kaartlezer---kaart.jpg