Unbelievable: First, the temporary password was sent via e-mail. If not intercepted then, it could be easily guessed. Had something similar to this where Bank of America required I re-verify my account settings. In that instance, first the process started after I had logged onto the bank web site. Next, the code to use was sent to my cell phone.