Thankfully, my OCBC online banking only allows you to interact with existing accounts. If you want to do anything interesting, you need to have a separate (Physical, completely offline) token to add new accounts, and you need the same token to "sign" transactions over a certain $$$ figure.