14 ms·
To send money over £250, RBS still use hardware card readers for their MFA flow. You put your debit/credit card in the device, entry your normal pin and then a
by aclelland 7y ago
To send money over £250, RBS still use hardware card readers for their MFA flow. You put your debit/credit card in the device, entry your normal pin and then a code that is displayed on the website. It's a little inconvenient of you don't have the device with you when you need to send large amounts of money but in general it's great to have rather than SMS.
Of course, I expect that eventually they'll move to SMS too since it's easier for them and more on line with the rest of the industry.
- imtringued 7y agoUnder the new EU rules 2FA over SMS is not allowed because it is possible to transfer phone numbers to other devices (through social engineering or simply because providers reuse old numbers) and thereby intercept the code. Instead most banks use an authentication app so that 2FA is bound to a single device.
- jwilk 7y agoCitation needed? Some Polish banks definitely allow using SMS as a second-factor. (And some even let you use a permanent cookie for that. :-O)