The user types the challenge code into the mobile phone, which validates that the challenge code is genuine. After the user has entered their PIN into the phone, it generates a response code. The user types the response code into the Web bank screen, and the transaction is confirmed.