Are accountants expected to call the customer every time they try to update the transactions? 

If the customer just presses "I  Approve" on the RBC app, what if it is actually a hacker who wants to transfer all the funds out of the customer's bank accounts?