I wouldn't worry about the bank's robot.txt as much as what your "friend" will do if somehow his account gets hacked? Will he unjustly blame(and possibly sue) you?. You are doing it for money, so beware. Friendships can die quite suddenly when thousands of dollars are involved. Write a contract that makes it "his responsibility" for the use of the script.