[zajio1am]

> That policy is particular to your bank. Anyone who knows my account number and has access to ACH can drain my account.

That is unimaginable to me. Here (Czechia), banks require explicit confirmation of direct debit transfers (limit for value per period of time for each initiator of direct debit).

[lisper]

Yes it is rather shocking. The financial system in the US is screwed up in many ways. Sometimes I’m amazed that it works at all.