The HypoVereinsbank changed the 2-factor authentication after deactivating mobile TAN. Since the update, each account refresh has to be authorized by the user:

- The HVB transmits the checking, saving and investments accounts via the FinTS interface. For the FinTS accounts a TAN must be entered for each account update in Outbank.

- The bank doesn't offer any credit cards via FinTS, therefore Outbank fetches them via screen scraping  from the online banking website. Each login on the website requires a confirmation in the HVB app.

According to PSD2, the strong user authentication must take place at least once every 90 days - depending on the bank, this can happen more frequently. Unfortunately, Outbank has no influence on how often the authentication is required by a bank.

As a workaround, you can exclude your HVB accounts from the automatic account refresh. This way, your accounts will no longer be updated automatically after you log in to the app and they won't be refreshed in the background. Of course, you can still update them manually whenever you have time to go through the strong user authentication.

• iOS: Select the account in the list of accounts > tap on the account name above the list of transactions to open the account settings > deactivate the switch ‘Include in overall refresh’.
• Android and Windows 11 / Amazon FireOS: Select the account in the list of accounts > tap on the three dots in the top right corner > open the account settings >  deactivate the switch for 'Include in overall refresh’.
• macOS: Select the account in the list of accounts > Click on the account name above the list of transactios > open the account settings > deactivate ‘Include in overall refresh’.