Very true.<p>It seems like the bank has a security system in place whereby only authorize computers with credentials may log in - not just a username and password. These computers need access to the accounts to be enabled by the bank, initiated by an email.<p>The fraudster spoofed Hillary's email address from IP addresses located in Romania and Italy. You would think the bank would have an adequate verification process (and done their due dilligence, such as a phone call) to determine that these emails were spoofed - red flags should have been going up everywhere.<p>If this is the state of security at that bank, keeping your money there is about as safe as keeping it in a suitcase on the street corner. All you've got going for you is security by obscurity.