wondering why i've to use 2fa (with a damn token) to access my inbank but there's no need of 2fa (on phone maybe?) to withdraw money from atm.
PS: do they seriously have a system that can turn off the need of entering the pin to withdrwa money? why?
PS: do they seriously have a system that can turn off the need of entering the pin to withdrwa money? why?
You need the card (something you have, factor 1) and the PIN number (something you know, factor 2).
The only things I can think of that uses one-time passcodes are the occasional password reset or login from a new device? Are there other uses I'm not aware of?
Some people I know are still not comfortable using an ATM, if you add passcodes they are going to have a very bad time.
however, if your system allows one to disable even the PIN code that's pointless.
Because ATMs have daily withdrawal limits and security cameras. Neither are infallible but they limit and discourage fraud.