That’s how it works with my Australian bank. It verifies me via a push notification to my app. And vice versa, doesn’t that also validate they’re the bank?
Not that I have an option to request them to perform the validation. But they require that validation to continue the conversation now.