@ncrav @punkscience_ns And even that isn’t really proof, when you think about it. I mean you give out those details when you want to receive money (like my ex-landlord did to me). You shouldn’t be able to use them to withdraw money from the account without some other security mechanism… otherwise it’s akin to being able to log into someone’s account by only knowing their username. The whole direct debit system seems to be seriously flawed without authenticating the account holder.