Don’t forget we are talking about an email that’s sent instantly (even if it’s not quite arriving instantly all of the time at the moment) after the customer taps a link in the app to log in.
‘Magic’ is just a bit of fun, it’s a term borrowed from Slack (& others?) and to be fair, I’ve had colleagues tell me how amazed they were that they could log in through one of these links, rather than having to remember their password.
This approach does fly in the face of conventional banks who “will never send you an email with a link to log into your account” but as Hugo has already pointed out, managing security like the other banks is not :mondo:'s aim
this is an approach that’s being adopted by more & more tech companies.
Even so perhaps @daniel could comment on this particular risk? I agree with your comments about conditioning users to click the link & this is a bank after all..