You actually have to let them log in to your bank account? That's not asking for trouble at all!