A bank-linking flow is a platform feature that lets a user connect a bank account to another service, often to verify account ownership or enable payments and transfers. It may involve entering bank credentials or approving access through the bank, depending on the provider.
Because this process handles sensitive financial access, attackers may misuse it to check whether stolen credentials work. A reported use of a bank-linking flow to test credentials does not by itself prove that access succeeded or that funds were taken. Defenders should monitor unusual linking attempts, repeated failures, and unexpected account connections. Users should start linking from the official service or bank site, not through an unsolicited message, and never disclose one-time passcodes to someone who requests them.