[ianlevesque]

I have a credit card that requires you to answer a security question just to make a payment, with an existing linked account. I can't fathom what scenario they think they are protecting against here.

[wool_gather]

Perhaps they're protecting themselves against you making an on time payment and not accruing any interest. ;)

[Ayesh]

My former bank sends an SMS OTP every time I make a transaction. Not TOTP support. If it's the same security question, password managers can easily fill it out, no?

This SMS annoyance is a major reason why I left them.