Linkers, If a two-factor method is insufficient to protect (stupid) customers, then I guess it's quite unreasonable for any bank to "blame the customer". http://www.theregister.co.uk/2007/04/19/phishing_evades_two-factor_authentication/ RC