You can (and should!) dispute direct debit. I believe that in most countries you should get a refund no questions asked. Check out the details with your bank.
That's a good one, I wasn't aware of that possibility (nobody ever got it in to their heads to take more than was due). From what I recall direct debit payments can be disputed when they're periodical, and then only for the last transaction, this is not at all like that but I will inquire anyway, because if that works I can resolve this really fast.
It might depend on the country, but I don't think there's one where you hand out your wallet and have no recourse whatsoever against fraudulent withdrawals. My bank (Poland) lets me revert any DD withdrawal through they web interface. The time limit is 30 days (business accounts 5 days only.)
Thanks for the hint!