2 ms·
Many banks and card issuers are using SMS for 2FA in Europe.
by daveoc64 3y ago
Many banks and card issuers are using SMS for 2FA in Europe.
- lxgr 3y agoNo bank is using (only) SMS as an authentication factor for 2FA. It's not allowed under the EBA's technical interpretation of the PSD2 regulation. Some banks do still allow it as a fallback option, together with another factor, e.g. a password or other knowledge factor. My bank even made it a paid service, which I fully support – SMS is extremely overpriced.
- daveoc64 3y agoI'm in the UK, so our implementation of the PSD2 regulation may be a bit different (in came in while the UK was leaving the EU), but I get SMS 2FA codes from American Express all the time in the 3D Secure process.
- lxgr 3y agoSome banks do still allow SMS by itself as the only authentication factor (presumably because they haven't got around to updating their solution or maybe think they've found a workaround), but it's not compliant with the PSD2 regulation in the EU at least. The solutions I've seen usually use a password or security question as the other factor.