I don't know about the cause, but I just want to say that it's extremely frustrating and at least a little distressing to deal with US banks in 2017 that don't offer proper 2FA, with SMS being the highest security option.