Some Addtional Comments:
there are 3 ways to Authenticate someone - Something you Own, Something you know, and something you are. Choose 2 for best results.
The something you own didnt work. Adding something you know (like a pin) wouldnt work because there is no benifit to keeping it private - on the contrary - you get paid an extra half day for disclosing it. - persumably your bank account has money in it, so you are motivated to not disclose the pin. Therefore the best option is something you are - Most people would not cut off their thumb for a half day of pay.
With the comment about fireing people - Its a unionized shop. this makes it more dificult, and you actully have to catch the culperts before you can peanlize them.