I've been shopping around for a new processor for my "high-risk" business and agents from two different companies stated they wanted my username and password for my account with you and my other two "low-risk" processors, which are both active. This sounds absolutely criminal. Have you ever heard of such a thing?
The excuse the last agent gave was:
"Yes, usernames and passwords. Because none of them provide monthly statements, the underwriters need the logins so they can review the accounts."
I feel like I should report these people to FBI-IC3, because not only will they have "unnecssary" access to my entire banking history, which is not relevant to them. They can then commit financial or other crimes in my name. When I complained to the last agent she replied:
"If you don't want to provide your user info, you can create a user account specifically for us that is reports only. We just need to validate sales/refunds/chargebacks."
What do you think about this? Is she back-peddling, because I challenged her about her "unusual" demand? This sounds really fishy to me. Also, why can't I just generate the requested reports and print them to a pdf or csv? This sounds just nuts.
