I just remembered my password reset battle with an online store. Yes, the email or the SMS took too long to arrive and when the code came, it was already expired. And I knew the password, by the way; it was just a "new browser" and they wanted a second authentication. Marvelous.

I once had a credit card company not let me add my card to my Google wallet because I didn't have the physical card, even though they sent me the virtual one... it had been 3 weeks and for their rewards I needed to spend X amount in 3 months. I had to call to verify my identity. Though I think that friction was on purpose