> you just file a police report for fraud and bank will claw back funds and reinstate you
If the fraudster has your password and OTP, and if the money's gone, bank will do nothing — as opposed to the check fraud. That's why TLA is a good check fraud story.
This doesn't make sense.
> "they sim-swapped me to intercept the one-time password".
You would notice by losing phone connectivity... so you would know you're compromised before you try to make a transaction.
Being 2FA, the attacker still needs to know the account user/password...
Then there's hardware 2fa for a lot of banks that don't do sms... good luck with that.
Or they use bank app in phone as 2fa. Which should run securely in enclaves.
Even if they have all of the above, you just file a police report for fraud and bank will claw back funds and reinstate you, same as for checks.