It is worse: in the US if you know someone's routing number and account number (which is written on every check), you can PULL money from their account. Practic

It is worse: in the US if you know someone's routing number and account number (which is written on every check), you can PULL money from their account. Practically speaking it's not completely trivial to exploit as most services that let you suck money out of account do some simple authorization first (they deposit some pennies into the account and ask you how many they deposited). https://en.wikipedia.org/wiki/ACH_Network https://en.wikipedia.org/wiki/ACH_Network