From my conversations with the telephone banking operators, it's clear that they have the plaintext password in front of them.