Require physical possession of one of these security devices in order to complete a transfer, load or withdrawal. When you press the button, it displays a unique number that is already known by the remote service.
This would get rid of just about all hacks since the number changes every 30 seconds. It's impossible to function without it.
I have one from HSBC and one from Paypal
Will it ever happen at epass? Hmmm