It's pretty common for commercial banking... which is good because in the US the laws protecting you from loss due to hacking are much weaker for a corporate account.