Dad bought a FIDO2 key. He goes to bank website, clicks "add security key", website says "to verify your identity you need an authorization code, call <phone number> to get it".
Calling that number gets you a voice bot that doesn't remotely understand what you need and offers you unrelated options.
19 days ago