It's possible that they create the character entry when you set your password and the bank/operator only has access to that particular character in plain text.