That's a point, technically they shouldn't have had your bank details, as you hadn't enrolled her. Obviously they've gotten them from her sisters file, but that's illegal!

Good on you Jodi