First of all, they are not a bank. Second, they already request quite a lot of personal documents, so tracking the IP won't help that much. And third, real banks don't care how you access their internet bank. They care about whether it's really you who's logging in to the internet bank. I can log in to the banks where I'm serviced from any place, using any kind of connection, and I never hit any limitation from their side. That's talking about some major european banks of course, I don't know about smaller banks though.