On the other hand, BankID has really taken of as the main fraud avenue. It's so much easier to just look someone up, punch in their personal number, start a log

On the other hand, BankID has really taken of as the main fraud avenue. It's so much easier to just look someone up, punch in their personal number, start a log in to the bank and then call them up saying someone is trying to steal their money, they need to stop it by verifying their identity with BankID. This instead logs the attacker in to the bank with full access. Now you just need to start a transfer to your bank account and tell them the ID failed, try again. Money is yours, now just make it jump between a few more temporary accounts and let your friend take out the cash at the ATM.