[lisper]

That policy is particular to your bank. My bank (Chase) doesn't do that. Anyone who knows my account number and has access to ACH can drain my account. (I solve this by having two accounts, one of which I use for ACH, and the other which actually holds most of my money. I have to actively transfer money from one to the other on a regular basis, but it's worth the effort to me to mitigate the risk.)

[zajio1am]

> That policy is particular to your bank. Anyone who knows my account number and has access to ACH can drain my account.

That is unimaginable to me. Here (Czechia), banks require explicit confirmation of direct debit transfers (limit for value per period of time for each initiator of direct debit).

[lisper]

Yes it is rather shocking. The financial system in the US is screwed up in many ways. Sometimes I’m amazed that it works at all.