[ildon]

Nope, your IBAN alone can be used to set up withdrawals. That has to be approved by the bank, so it's not as easy as stealing the IBAN, but still...

[ThePowerOfFuet]

Only businesses can create SEPA Direct Debit mandates, and they can be blocked easily and refunded at the initiative of the account holder no-questions-asked within two months.