A method of performing a secure transaction using non-secure communications, including: contacting a service provider by a customer to perform a transaction; sending an non-secure message by the service provider over a communication network using a communication device with details of the transaction to a transaction server; initiating a secure transaction at the transaction server; generating two one-time passwords at the transaction server; sending the first one-time password to a communication device of the customer and sending the second one-time password to the service providers communication device; revealing the first one-time password to the service provider by the customer; replying to the transaction server by the service provider with a message based on both one-time passwords; completing the transaction at the transaction server.