It's possible if you're targeted for some reason. IMO it's very unlikely if you're Joe Random logging in to your bank's website, and better than not having any

It's possible if you're targeted for some reason. IMO it's very unlikely if you're Joe Random logging in to your bank's website, and better than not having any 2nd factor at all.