This is not the Bank of America site, but if I put in a few hours of work, it could look pretty similar.

This page uses a custom cursor (shown below) with an enormous offset. This confuses the user, causing their cursor to reside in an unexpected region of the screen.

Due to the confusion caused by this custom cursor, the user can be tricked into clicking certain elements, or trusting deceitful interactions. Oddly enough, in some browsers, this cursor is displayed outside of the viewport. As a result, when the user thinks they're clicking the URL bar (or any other UI component), they may actually be clicking on the page.

To demonstrate one scenario, click the lock icon in your address bar.

I think you are using .

Let's talk about this on Twitter: @jonathansampson