Hacker News Reader

Only if I allow it via banking website, while logged in (or come in person), right?

No, only a "recorded consent" is required, usually a physical signature or a record of you agreeing to this via online form.