My bank takes a different approach, an old one, to security.  Here are three things that happened to me at their main bank office over the last 6 months.<p>1 - I sat down with a mid-level manager asking about a debit card in my wife's name for one of my accounts.  The manager pulled up my account and says "I see you were in Wilmington last week.  My family is from there."  And we chatted about Wilmington for a bit.<p>2 - I walked up to the teller desk and said "Please move $500 from account A to account B."  I filled out no forms, showed no id, didn't even know the account numbers.  The teller said "No problem Mr. Hancock, have a nice day."<p>3 - I needed to change my phone number linked to all my accounts.  I walked into the teller and told her I have 5 accounts and wanted to change the phone number on all of them but didn't have my account numbers at hand.  She handed me a post-it note and asked me to write down the new phone number:  "No problem Mr. Hancock, we'll see it gets done."<p>The approach this bank takes is oriented around trust and liability, not IT security.  Some may be upset that a bank manager would/could scan my transactions and openly acknowledge they see where I was last week. But I see this as openness in acknowledging that they can see the data.  All banks can see this data and many credit data warehouses have this data.  My bank simply doesn't pretend they can't see it.<p>In response to your post, jacquesm, I completely agree with your point of view from an IT perspective.  However, I do not expect a bank, large or small, to get things perfect internally.  So I choose to do business with one I trust to uphold their end of liability.  I take this approach with most business partners, as I'm sure many do.  When I buy a $50 item on ebay, I expect less of the supplier and pay accordingly.