Hacker News Reader

I’ve been with a few different banks (ING, Rabobank, Bizner, HSBC) and they all use two step verification. Some send texts, others use a card reader or such.

Ing in the US was bought by Capital One, and neither use key fobs (if that's what you meant). Are you in the EU?

I think a lot of banks just send a confirmation email.

That's actually fine, because due to the non instantaneous nature of today's banks, they can cancel the transactions for the next day or so.

There's a trojan app for that.

Indeed there is. There exists Android malware that infects your PC with a Zeus variant and then the two work in concert to intercept your SMS-based two-factor authentication.