Disturbingly some of my most frustratingly, restrictively simple password requirements for account registration have been banks and credit cards. If I recall, at one point American Express required I choose a password 4-6 alphanumerics.

I can say that every bank and credit card site I've used have vastly, vastly improved their security model in the past 5-7 years or so.