ING and the mandatory app: the new banking dilemma
ING's imposition of its mobile app as the essential way to access accounts has sparked intense debate among customers, who question the logic behind the move and see it as a step toward greater digital lock-in. The official narrative, anchored in PSD2 compliance and the promise of better security, clashes head-on with resistance from a customer base that values the autonomy and functionality of traditional platforms.
The forced transition: security or commercial control?
The change, driven by the need to adapt processes to European regulations, is seen by many as a centralization strategy. ING is said to be essentially trying to cut operating costs by eliminating SMS infrastructure and consolidating all operations into a single app ecosystem. This migration, however, has not been welcomed; the experience of those who already used the website or alternative methods is one of growing frustration, pointing to a decline in user experience.
Some argue that app-based authentication adds a superior layer of security, especially by requiring two-step validation per transaction. Critics are fierce: they debate whether this security is truly robust or just a protocol change that, in ING's case, is less secure than the previous use of SMS.
The security dilemma: SMS vs. app
The security analysis is where the argument gets complicated. Some users point out that using SMS as an authentication factor, although criticized for its vulnerability to social engineering and SIM swapping, offered a separate verification channel. The app's implementation, meanwhile, introduces a new level of dependency. It is debated whether security lies in the app itself or in mobile device management, a crucial point given that phones themselves are susceptible to exploits and malware.
A point of friction is the perception that, instead of offering robust and diverse verification methods, a single path is being forced. The idea that the bank imposes a single operating channel, ignoring customers with older devices or privacy preferences, creates a sense of exclusion.
Rejection of the closed ecosystem and banking migration
The reaction to this imposition is clear: capital flight. Several customers have said they are willing to leave the bank if the app requirement is consolidated. This mobilization is not just a technical complaint; it is a statement of principles about the customer-bank relationship. A pattern is emerging where the rollout of new banking technologies, although justified by regulations, is seen as a maneuver to increase lock-in or cut costs rather than a substantial improvement for consumers.
It raises the question of whether this change is an isolated case at ING or a systemic move across the Spanish banking sector, something other users have begun to notice at other institutions.
With these shifts in operations, the future of digital banking depends on finding a middle ground between the security required by regulation and usability that is not sacrificed to a technological imposition.
Related discussions in the forum