[throwawaymath]

Yes, for any bank that doesn't provide them with API access they're scraping the login pages. They even do this for banks which implement anti-scraping measures.