[anologwintermut]

How do they authenticate the other guy to get his money out ? all you have is his email address. What do they do, hope someone can't see the auth-code you send him via email?