Since the success rate of phishing attacks is increasing, I would like to suggest the following additional security layers to be implemented:
- Option to disable website login altogether or only using the app. The biometric check can be bypassed using proper software installed on a fake website.
-