[PhilipRoman]

It is and I would love to know when exactly that is the case. Normally all my online payments require 2FA, but some companies can apparently just transfer my money automatically. I'm guessing they need some kind of agreement with the bank, as otherwise 2FA would be pointless.

[BrandoElFollito]

Exactly this. Some vendors such as Amazon have agreements with SWIFT providers to bypass 2FA.

This comes with extra liability but this is part of their risk and costs.