SBI puts extra layer of security in debit cards by removing VBV/MSSecCode. Now all online purchases must be done using sms otp. An otp which comes in time only once every 10 times. Also SBI has decided that all of India is using wireless mobile internet. Hence if you are ever in a place where you don't have cell reception, or you have lost your phone, or you simple don't have the phone with you, you are not allowed to do online transactions.
[Start Satire Mode]
SBI will put even stringent security protocols from 2016. From 1st Jan 2016 when conducting online transactions you'll be given sms otp. Now you have to call bank and give the otp, your card number, your date of birth, your fathers name, then you'll get one more otp. You'll provide that to the seller who will do one more round of verification from his side. And voila, within half hour only you'll finish the transaction.
[End Satire Mode]
Seriously, if it wasn't for the locker and 1000/- min balance I'd have ling ditched SBI by now. Their online services are a joke, their cards don't work abroad or even in international transactions, their atms are overused and untidy. I have ended up using my SBI account as a pure cash drop facility, sort of like a piggy bank, not like a real bank where people do transactions.