Exactly. The assumption is that would-be fraudsters would neatly obey other rules/norms, such as opening one account tied to one legitimate funding source. Any

Exactly. The assumption is that would-be fraudsters would neatly obey other rules/norms, such as opening one account tied to one legitimate funding source. Anyone who has run an online business that moves money can tell you that fraudsters are ever-probing for that weak spot and, if it is there, they will find it. There is too much "generally" and "might" in their risk mitigation here, such that their primary line of defense really boils down to hope. Meanwhile, they've managed to create limitations that may well infringe on legitimate activity. They really need to re-think this problem or they'll have their hats handed to them in short order.