Nah, I guess you've over simplified things. We can take card number/account number as address but again, you will need something to identify yourself to the ban

Nah, I guess you've over simplified things. We can take card number/account number as address but again, you will need something to identify yourself to the bank as the genuine account holder and that's exactly where all kinds of sh*ts happens: uid/pwd are neither safe nor convenient; sms/text msg are not much better than uid/pwd; hardware token/csp which is much more secure but trust me, no one really want to go there as there are simply too much environment related quirks.