I used to use a bank with a similar bug. It would send you a new password (in plain text) but any special characters would be shown in unicode. So even though t

I used to use a bank with a similar bug. It would send you a new password (in plain text) but any special characters would be shown in unicode. So even though the password might be: sdi*74s) It would be in the email as: sdi\u002A74S\u0029 which of course wouldn't work.