I don't think this is a great solution for highly sensitive information like banking - most people have lots of different devices that receive their email and j

I don't think this is a great solution for highly sensitive information like banking - most people have lots of different devices that receive their email and just one "weak" link could give malicious access. That being said, for sites this that are more concerned with "verification" than "authentication" this seems like a viable approach.