[oblio]

I don't believe that.

Let's say I have account number 1234 and my name is John Doe.

You're telling me that, no strings attached, no repercussion, Mike Hacker can set up a large recurring payment from my account, without my approval?

I'd need solid proof of how that would work.

[jon-wood]

Yes. That is a thing that can be done, here’s Stripe’s documentation on how to set up a Direct Debit mandate: https://stripe.com/docs/payments/payment-methods/bacs-debit?...

The thing that’s being missed here is that direct debits can be disputed in the same way a credit card payment can, and by default the customer wins. Their money will be refunded immediately by the bank, who will then go after you to get it back.

[jeltz]

Yes and no. Swedish banks for example will just deny direct debits unless the customer has explicitly agreed to let their accounts be charged. So direct debit works differently per country and per bank.

[oblio]

Ok, that's both interesting, slightly unsettling, but also doesn't really fall under:

> You're telling me that, no strings attached, no repercussion

This bit:

> by default the customer wins. Their money will be refunded immediately by the bank, who will then go after you to get it back.

sounds a lot to me like repercussions :-)