Your bank site must be using https, if not, switch banks, seriously. One common practice nowadays is that the bank homepages are usually not secure (e.g., http://www.bankofamerica.com), but the login forms are secure (just check the source for bankofamerica page). Of course, this is not really secure since someone can change the homepage, hence the form. I think there was a recent slashdot discussion on this practice. Anyhow, if you directly submit to the secure login form using https, you're safe. There is no need to change your code, just add "use Crypt::SSLeay;" to your script. You can install it (if on windows) by: ppm install http://theoryx5.uwinnipeg.ca/ppms/Crypt-SSLeay.ppd