You literally just described fraud protection, which is something most banks nowadays use. It might be opt-out (or even opt-in) but that's very much a thing that banks do, and they get plenty of false positives with it.