I am told than banks alone can attach an OTP to an attempt to transfer money to a spread betting firm. Is this so? I am thinking that spread betting firms can also do this. Is this so?