@freeagent @SwiftOnSecurity In Germany, many large (=legacy in your words, I guess) banks have deprecated and removed SMS a while ago. Instead, they offer 2FA either through their own (proprietary) apps or through hardware (bank card + proprietary reader device such as this one: shop.reiner-sct.com/tan-genera )