Step 3: Log in and select your account to pay from. Don’t worry, we have security covered. 🤣

Yeah, scam or not, this method of getting your account and routing information is not at all secure. I’m actually more surprised that the banks allow another site to initiate the login with a plaintext password. This defies all decent security practices.