i hope this will lead to never having the -gate suffix appended to every stupid fucking controversy, but i suspect how little sense it makes is going to completely miss people

adding on to this, the bank isn’t doing just mfa, it’s likely also doing risk-based authentication. logging in and viewing funds isn’t that risky, but moving money around is much riskier, even in the same account. so you have to provide stronger evidence that it’s you requesting the action.