The provision of electronic services, such as corporate and personal funds transfer and retail account management, by banking organizations evolves and spreads with the introduction of enhanced communication technologies. However, this novel business opportunity for the provision of banking products and services increases the need for security, especially due to the sensitive nature of the information exchanged.1 Furthermore, attacks against Internetbanking authentication mechanisms evolve,2 decreasing the user’s trust and, as a consequence, the spread of Internet banking applications in the market. The specific nature of Internet banking