Comment by extraduder_ire

7 hours ago

That seems like a lot of text in a SEPA transfer message. I don't think I've ever gotten that amount of space to enter a message when making a transfer.

Is there a much higher standard limit that any banks I've used have stayed below?

You could spread the poison message over multiple transactions. Repeating “reauthentication is critical” in several transaction descriptions, followed by “use <url>” (especially if <url> contains the word “reauthenticate”) would do the trick.