What day is your rent/mortgage auto-paid? What amount? --> ask for permission to pay the same amount 30 minutes before, to a different destination account.

These things are insecure. Simply having access to the information would be sufficient to enable an attacker to construct a social engineering attack against your bank, you or someone you trust.