This is really unacceptable. Last year people in Holland got tricked into logging in into a fake banking site via the same method. Of course the Knab Bank should be ashamed it didn't implement 2FA, but still.