[manmademagic]

ING Australia is even worse for this, as it’s an 8 digit acc number with a 4 digit PIN to login.

St. George isn’t as terrible, but they have a quirk of requiring a 4 digit security number along with your password. That’s not how MFA works...

Better security practices and open APIs are the two things I wish banks would get sorted.