This depends from country to country and regulator to regulator. In Pakistan for example, 2FA is now a requirement for Internet Banking.
Are banks that offer online banking services required to use two-factor authentication?
Why don’t PayPal or Skrill use SMS-based login verification—are there technical or regulatory obstacles?1 ansIs two-factor authentication via OTP really making internet and mobile banking safer?1 ansWhy do only certain websites require an extra 3-D Secure authentication step during online payments?1 ansHow risky is online banking, and what measures can reduce those risks?1 ans