At least in consumer usage, SWIFT transfers are "push", not pull as you may be used to with American ACH. So the concept of verifying a request doesn't make sen

At least in consumer usage, SWIFT transfers are "push", not pull as you may be used to with American ACH. So the concept of verifying a request doesn't make sense. It sort of sounds (from the public information) like the Bangladeshi bank's credentials were compromised and used to make fraudulent transfer requests to the NY Fed. That's not really a problem with SWIFT. Arguably the NY Fed should have flagged the requests as suspicious, but that's probably a best-effort kinda thing.