When https://n26.com https://n26.com launches in the US they could prevent this attack, unless they fool customer support somehow. In the EU they have non-SMS b

When https://n26.com https://n26.com launches in the US they could prevent this attack, unless they fool customer support somehow. In the EU they have non-SMS based 2fa and optionally send a push notification for all transactions. Also, I'm looking for a bank that blocks all debits/transactions/transfers unless pre-authorized via app. Anyone know if that exists?