John Do So this site has the name of the Rabobank in it.
I figure you entered a false passcode and still the site replies with 'Geweldig!' (Great!)... So it only wants a phone number and a passcode?
Can they, in combination with your email address, use these data to gain access to your account?