Note that the action points to your website and that the hidden inputs contains the needed POST information.
This example will try to transfer a fund of 1000 (in whatever currency) to account number 12345678.
If you require a login on your form and also actually checks on that,
then the above will of course only be successfully executed if the unaware user has recently logged in your website,
but not logged out yet, or the session is not expired yet.