This is POLi and it's a massive security risk that they have everyone's bank passwords.
It could also be something PSD2 based. You should be able to create payment using PSD2, but the client still has to approve it inside their bank app.
alt Hacker News
It could also be something PSD2 based. You should be able to create payment using PSD2, but the client still has to approve it inside their bank app.