The technical claims don't seem very far fetched. They're basically describing every banking "anti-fraud SDK" I've ever reversed.