I was scraping their website every few minutes, from a cloud provider, using a cookie I created by logging in manually while VPN'ing through the cloud (so the IP looked the same).

Eventually the cookie started "expiring" quicker and quicker, and they eventually thought I was being hacked. I knew how sketchy the whole thing was, so I didn't want to admit that I was doing the "hacking" myself.

It was probably against the terms of service, triggering alarms on their side, and risking being classified as actual hacking. Not worth it.

Eventually I got a bank account and app with instant transaction notifications, so now there's no point in scraping anymore.