vs8721 If it is permission issue, those code word message wouldn't be in SMS app right?
If the bank app is expecting to collect the SMS itself, as opposed to you typing it in, then the bank app probably needs some SMS permissions.
If the bank app is expecting one of the Google Play apps to collect the SMS for it, as opposed to you typing it in or it collecting the SMS itself, then some Google Play app will require some SMS permissions.
Perhaps the bank app expects Google Play to collect the SMS but then it expects to be able to transmit the SMS itself. It's hard to say!