Several banks I use do this all the time. Except they don't do it as a teaching experience, but as part of their normal operations, and if you refuse to do the

Several banks I use do this all the time. Except they don't do it as a teaching experience, but as part of their normal operations, and if you refuse to do the extremely sketchy, red-flag, never-do-this thing, you will not be able to get your task done. I've been required to provide part or all my online banking PIN on the phone and my credit card PIN on a random sketchy website (as part of 3DSecure). Different banks. Both legit and repeated.