See the following article to explain what truelayer does:
It’s just a connection facilitator between banking API and payment receiver. Using Open Banking does not go against all the anti-fraud advice banks give. If it did, why would every UK bank create API’s to allow you to connect in this way?