I don't know much about what sort of security compliance banks must implement, but surely that's in violation of something? What country?