Some German Banks offer two-factor authentication (2FA), such as a challenge-response access token based on the chip embedded in the debit card or ATM card. Others, however, offer simpler PIN and TAN based online banking services. No sensitive information is being shared with the merchant, such as credit card or Giro account numbers.