Ha, in Swiss biggest bank by nr of clients (PostFinance), I log into ebanking with card reader (their yellow calculator-like thingie). Reader reads the payment

Ha, in Swiss biggest bank by nr of clients (PostFinance), I log into ebanking with card reader (their yellow calculator-like thingie). Reader reads the payment card, asks for key from ebanking (after entering username & password), after entering it asks for card's pin, gives back resulting code which goes to ebanking. If I count correctly its checking 1) username/password; 2) currently holding my payment card; 3) card's pin Even if I don't count owning reader itself as another point of security (since it can be obtained ie via social engineering and its a simple generic device) its at least 3-factor auth and its still the most secured ebanking from all banks I have. Annoying a bit to log into but this is one place I don't mind it at all. And no phone involved in any step, for which I am very glad (not having yet another thing to manage, keep updated, worry and chase cancellation when lost/stolen).