It sounds like you're about to reinvent Sofort, a (now defunct, or sold off at least) payment system that first worked on reverse engineered online banking and then PSD2 to mutually verify direct bank transfers.