From your authenticator app. Required for every account, including staff.
I lost my phone
Customer balances are held by licensed partners. Settlement is received by Williams & Coast, registered with Visa and Mastercard, and paid on to its merchants.