Bank security practices are so byzantine and broken it's absurd. I spent 45 minutes helping my mom unlock her Chase account today (which was locked because she sent $500 via zelle to a friend who is in the hospital!) Here's how it went:

- Locked for no reason

- Number on website goes to automated answering machine

- It asks for her debit card number (what?) to identify the account

- This is lost and also needs to be replaced. There is no alternative method, 0 doesn't get us to a person

- I call Chase customer service, different number, very similar system, but I am able to get a person on the phone

- They verify her identity by making me hand the phone to my mom and ask her to state her name (what). They also ask for her ssn and a security phrase she doesn't know, although she does manage to share the security phrase for her other bank.

- They re-order the debit card and transfer us to another department, where we do the whole verification charade again

- They send a 2fa code via sms. We receive it, but the site shows an error and won't let us put the code in.

- They then send a different code, and ask me to give it to them over the phone, which the text message explicitly says not to do.

- Despite my better judgment I gave them the number. They then do something on the backend, and I enter a *new* code they gave me over the phone into the web portal to get it unblocked.

It's no wonder old people get scammed! Force someone to deal with this BS for 20 years and anyone would get confused and give the wrong code to the wrong person.

show me another protocol that has made this much progress in a couple years though. bitcoin in the early years was way worse. So was email. Quality takes time, can’t expect it overnight.