[trumpdong]

This is POLi and it's a massive security risk that they have everyone's bank passwords.

[fireant]

It could also be something PSD2 based. You should be able to create payment using PSD2, but the client still has to approve it inside their bank app.

[trumpdong]

They said Australian - it's POLi.

[TRiG_Ireland]

It was indeed POLi. Strange that it's using actual bank passwords!