That's a good question.

We try to mimic as much as possible the requests that banks' mobile apps would do to avoid them becoming "hostile".