To add money into my PayPal wallet I have to use Trustly. Trustly connects to my bank account and draws the funds from there.
In order to connect to my bank account I need to provide them with MY BANK USERNAME AND PASSWORD.
I can see my bank balance, I receive a one time token SMS from my bank to agree with the transfer... the integration between Trustly and my bank is legit.
The thing that bothers me is that I need to add my bank username and password on the Trustly site. Most of the merchant integrations of these type I have seen usually involve a redirect to my bank site where I insert my username and password, I authorize what needs to be authorized, etc, then get redirected back to where I came from. So basically, nobody but my bank deals with my credentials. Not so with Trustly, where I give them my bank username and password. They say they don't store any credentials, and I still need a one time token that my bank provides, but still... can they be trusted with my bank credentials?
If they do store them and someone gets access to them, I am still exposed to social engineering attacks where someone might try to convince me to give them the one time password.