You are also quite quick to dismiss cheques as someone that never even tried them...
Online banking is dead simple to secure: require a TOTP token. It's something you have (like a debit card) + something you know (PIN/password). The poison being introduced is through a third party, and entirely unrelated to the original function.