Hardware tokens and biometrics are better because it makes it harder for the scammer to describe a plausible scenario to intercept the authentication. In one o

Hardware tokens and biometrics are better because it makes it harder for the scammer to describe a plausible scenario to intercept the authentication. In one of the linked articles the scammers pretended to send a one-time token and asked the victim to read it back. This is the same process my top-10 US-based bank uses, so it wouldn’t necessarily raise any red flags.