It is understandable why clean merchants dont want to give out login credentials or even use a 3rd part like Yodlee. Every week you hear about a massive data breach by big companies,healthcare,and banks. It makes merchants uneasy. If your lender cannot call the bank to verify then get a new lender.