So somehow, I apparently mixed up #IBAN numbers and ended up setting up two direct debits in my ex-landlord’s account instead of my own, which leads me to the question: How the heck does that pass even the most basic security checks? Do they not even check that the name on the account matches the one provided? (I managed to get my name right, at least.) Otherwise, it basically means anyone can set up a direct debit for anyone else if they know their IBAN, which is absolutely bonkers.