Depends. There's a bunch of providers (eg Yodlee) that ask for bank credentials (previously on HN https://news.ycombinator.com/item?id=18655712) Akoya in US and most European providers use real bank APIs.