Perhaps what was sent was two things: a form with various parameters (name, birth date, amount of credit, etc), and the contract.

The bank then only noticed the changes in the form (since they have to input it to their systems anyway), and didn't notice the changes to the contract (since it's a contract of adhesion, and thus not supposed to be modified).