The bank told him that it had sent a one-time passcode to his email for two-step verification ... vigilance — and a little ...