Its mostly protection against phishing attempts in banks case
Nobody is going to hack bank directly but will use phishing technique but most phishers after getting the first user and password have to redirect u to some other page,so u don't suspect anything
Most of them are designed that way althought there are some advanced ones that will catch redirect u to second fake login and catch other info to

__________________
Website protection---Lot of tutorials to help u protect your website,penetration and protecting services and more...