Comment Re:Two factor authentication (Score 1) 538
That's not just close; it *is* two factor. You have the phone.
GP was right. The bank's not sending the code to *your phone*, they're sending the code to a phone number they have on their system. A very subtle but important distinction.