Hacker News new | ask | show | jobs
by contubernio 40 days ago
Banking basically has to be done via phone now.
3 comments

Maybe I am lucky in the USA, but every bank I’ve ever done business with can be accessed through a PC and web browser. If any of my banks should decide to remove that option, I just move over to one of the other thousands of banks in the USA.
That or you can simply go in to a branch office.
I keep seeing this, but I've never signed into a single one of my banks, mortgage companies, stock brokers, or credit card companies on my phone. The phone might be used to get a code for 2FA via text, but that's the extent of it. Everything is done on my PC through a dedicated browser specifically for financial purposes. This applies to Chase, Fidelity, Schwab, Wells Fargo, Marcus, Morgan Stanley, Amex, and more. So theoretically there's no reason a Linux OS on a phone can't do any of these things without Google or Apple by simply masquerading as a PC.
I think the disconnect comes from the European vs the US perspective. In Europe, banks in many countries require smartphone apps for 2FA (unless you still have one of the old authenticators that you can hold on until the battery dies). One of the reasons is that PSD2 requires two-factor authentication:

https://www.betaalvereniging.nl/en/knowledge-base/digital-id...

My guess is that given that banks are liable in many cases of account compromise where the user did not do anything wrong, they generally don't use SMS or e-mail auth because it is relatively easy to compromise (e.g. no or bad encryption, downgrade attacks, etc). Also, doing 2FA through a smartphone app is much cheaper for them than keeping a fleet of authenticators running.

Luckily, it looks like PSD3 is going to require access without a smartphone too:

Require payment services providers to ensure that all users can benefit from methods to perform SCA which are adapted to their needs and situations and, in particular, that those methods do not depend on one single technology, device or mechanism, for instance on the possession of a smartphone.

https://ec.europa.eu/commission/presscorner/detail/el/qanda_...

So things are looking up in that respect.

TIL about PSD3. Thank you.
Find a better bank I guess. I’ve never used my phone for banking of any kind ever.
I am in Spain. It's universal to use mobile device for almost all banking this is common in Europe.
The only time I go into a bank is to deposit cash, and that is very rare.

I have no idea why people think in-person banking is superior, it is a pain in the arse.

That said, my bank predates all the fintechs by decades and was phone-first before smartphones.

Sadly, that's not a great answer where most banks are going towards the same direction. It's also convenient to use a phone for banking.