Oh, so that's why some services have separate codes for login and transacting. Didn't know it was an EU regulation.

Still better than in-house crap.