They signed into users bank accounts, in other banks, to set up transfers (which also gives you all account statements).
