Over in the UK NationWide started sending out the little pin/auth machines 10-ish years ago (from memory). They're pretty smart about requiring it for anything

Over in the UK NationWide started sending out the little pin/auth machines 10-ish years ago (from memory). They're pretty smart about requiring it for anything "unusual" but allowing standard stuff (moving money between my own accounts, paying my usual credit card bill) is fine based purely on password login.