This occurs (occurred?) in practice for the Swedish e-ID system (BankID). There are examples of companies that don't want to pay to verify identities, and so wi

This occurs (occurred?) in practice for the Swedish e-ID system (BankID). There are examples of companies that don't want to pay to verify identities, and so will instead replay the codes to log directly into the Swedish tax agency website as the user to read their information from there. News article about it, in Swedish: https://www.svd.se/a/yvMvle/skatteverket-utfardar-bank-id-varning https://www.svd.se/a/yvMvle/skatteverket-utfardar-bank-id-va...