PSD2 certification - you must have some way to implement 2FA and a lot of banks prefer using an app for this that they can also use to gather information about

PSD2 certification - you must have some way to implement 2FA and a lot of banks prefer using an app for this that they can also use to gather information about customers than using strong authentication methods. I know a bank that makes you type your credit card PIN key after receiving an SMS in a mobile site... (cannot disclose which one).