look up PSD2, which is an EU directive with the same objective, coming into effect in september this year. But I'm not entirely sure if 2fa is also necessary for login and not only for transactions.