Comment by mahboi

Misleading title; it's not pwnage, or at least not known. The customers authorized the agents. The "unauthorized" part is that the bank didn't want customers using agents.