regardless cloning card or not, TAC & OTP should have been made aware to the registrar of the account. since the account is tied to the account's phone number, large transaction above RM1k should have been notified to the user's account.

this one no notice, this is absurdly ridiculous. Bila la banks wana improve on the security? how are we safe anymore from this?