<i>It&#x27;s crazy but people use this and have no problem handling over the keys to their bank account.</i><p>I wonder whether there&#x27;s more to that story. It seems like a potentially useful payment service, but it also seems like something the banks would surely be aware of. Customers giving up their credentials like that is probably a blatant violation of the bank&#x27;s normal terms of business, and asking for those credentials or failing to keep them secure seems legally risky for the payment processor as well, particularly if anything ever goes wrong. Are you sure there&#x27;s no separate agreement or commercial arrangement to cover this, probably between the payment processor and the banks?