Okay, top three banks in the US.. Chase requires MFA, but still allows SMS, which can be broken easily with SIM swapping. BoA and Wells Fargo MFA can be complet

Okay, top three banks in the US.. Chase requires MFA, but still allows SMS, which can be broken easily with SIM swapping. BoA and Wells Fargo MFA can be completely disabled, which is how many people likely have their accounts set up. Until just a few years ago, mine would pop up an MFA prompt, but if you hit the "mobile website" button, it would just bypass it completely. I reported it to them for at least five years before it got fixed, and it's more likely that they just fixed it on accident.