I cringe every time I log into the AMEX site.  I cannot believe a financial institution as large and with the resources they have allows that kind of lax security.  Even worse when you consider the business accounts that manage hundreds or thousands of corporate amex cards.