Several banks here in Brazil have fingerprint readers in their ATMs. This makes at least two factors: what you have (the chip in your bank card, which also identifies you to the ATM) and who you are (the stored fingerprint). Depending on which operation you are doing, or on the amount of money involved, the ATM can also ask for the third factor (what you know): one or more of a numeric password, an alphabetic password (chosen from a group on the screen, so shoulder surfing just once isn't enough), the first/last three digits of your tax ID, your mother/father first name, and so on.

For phones, things aren't as advanced, though a bank manager told me that fraud happens more often when online banking is used on the computer, not on the phone. The phone is, in fact, often used as the second factor for online banking in the computer.