If >1 special character is not allowed the last check should be failed . The second check is literally satisfied even if there are 2+ specials.

I’d not be using that bank.