Bank statements sent without consent

So Someone tried to open a Coricraft account on my name. I know this because I received an SMS from standard bank, stating they have sent my bank statements to RCS. So I queried it from RCS and got my answer. I also noted this on my Transunion credit alerts.

Now, my issue with this is, why does Standard Bank first send the statements and then SMS the Standard Bank account holder stating they can query it, if it was not them.

Permission should be asked before the statements are sent!

Please call me about this. I am not happy with your authentication methods lately.

This was the SMS: Standard Bank has sent your bank statement to RCS Integration as per request, IDX Ref No ***2 If you did not give consent, call us on ***