If he hadn't have logged you into the bank website then you would have to break laws to access it.

As said if the parent is paying for it it is the parent's phone.