yup hsbc is using it too, and more banks will follow up due to
increase amount of phishing in the emails, pretty surprise that it
only recently caught up.
banks in korea will already using this method years ago although
the code numbers were on a plastic card which the bank gives to you
once you apply for internet banking, you have to input each time
you logged on and do transactions online.