Let me ask to experts how bank BBVA and Santander en España can check dedicated digits of my password during call to their hot line? They said me that it is verification procedure but I am not sure it is safe because every call they ask different position numbers of password and their system can test it with some magic! I am not stupid to understand that they store my password without hash form. In addition during verification they sometime asked my DNI which is login to my bank account. Can somebody help me to find how I can find some security government duty to notify them this dramatic situation?