Would it be possible for them to just rely on the commodity chip and PIN readers that most banks (in Europe, or at least the UK where I am) use for 2 factor auth for online banking?