For too long, the onus has been on us, the bank customer to prove our identity using a series of "security" questions. However, we can't actually prove that _they_ really are our bank: AFAIK there's no mechanism in place.

So how about a facility for setting up a passphrase on your account that _you_ could ask the bank for?

"I'm your bank".. "What's the passphrase?" "errrrr...." "goodbye scammer".