Asked for my personal Bank ID and Password in order to make a payment

YES! ...and it felt hinky so I contacted Chase's customer service via the number on the back of my card. The agent stated JP Morgan was indeed asking users to verify their bank information on loans (I was able to pay my credit card without having to provide personal bank information). I have NEVER had a legitimate website ask for my banking user ID & password and expressed my dismay to the agent. She said if I was not comfortable, I could use the alternate method of verifying my account, which consists of JPM making a few small withdrawals from my account and then one deposit in the total amount of the withdrawals. I would then have to verify the amounts next time I accessed their website. Naturally, I agreed to go this route. Here's the kicker, the next day my card was frozen and my bank's fraud department contacted me to verify suspicious activity on my account. I verified the purchases/deposits and all is apparently well. This may very well be a legitimate request from JPM but regardless, it is suspicious and makes me highly uncomfortable. I have canceled my card with them & am in the process of refinancing my car with a different institute.