Yet another reason why SMS 2FA should not be used. Shameful.
It's used, as far as I can tell, because banks don't want to have to explain to millions of customers how to use anything else.
What is a better 2FA channel?
It's used, as far as I can tell, because banks don't want to have to explain to millions of customers how to use anything else.