@Edent I'm pretty savvy, but can't say for certain that I would have been able to see through this in the heat of the moment. Thanks for posting this. The implications go well beyond a bank fraud scenario. So many services have taken to using in-app verification as their way to validate authenticity and all of those can be gamed under the right circumstances.