Post #4097211

i wonder if web merchants have a metric for the users they lose when their MFA gets too pushy and it becomes easier to just go to another merchant. I have lost track of the times that I've gone online to buy from instacart and doordash and even Amazon and Xed out of it after a while because I didn't want to get up and go find my phone and they were insisting i get a code from it. There's a lot of enterprises for whom MFA just represents an easy way to get your phone number while they also shift the burden of their security to you, the user. And to boot it's an incredibly easy thing to penetrate via social engineering, considering PINs are often visible on the lock screen of a phone when texted to that phone. And these days i have a fairly low threshold for how many hoops i'm willing to jump through to 'confirm my identity' and I can't be the only one. So yeah. I wonder if there's a metric out there for transactions lost because the mfa got too heavy handed