3 ms·

Sounds like you're from the UK; I think you're probably thinking of when Jeremy Clarkson gave out these details and a Direct Debit was set up on his account usi

Sounds like you're from the UK; I think you're probably thinking of when Jeremy Clarkson gave out these details and a Direct Debit was set up on his account using them: https://www.theguardian.com/money/2008/jan/07/personalfinancenews.scamsandfraud https://www.theguardian.com/money/2008/jan/07/personalfinanc... However the Direct Debit guarantee allays most concerns one might have about this particular attack: https://www.directdebit.co.uk/DirectDebitExplained/pages/directdebitguarantee.aspx https://www.directdebit.co.uk/DirectDebitExplained/pages/dir... If one presumes that there are exceptions to the "pay-in-only" constraint then it will be vulnerable to fraud one way or another.

NiceWayToDoIT 6y ago
Spot on, UK. I was thinking no exceptions, except (I hope this does not defeat the purpose of previous no-exceptions :) ) in the case when you transfer money to another account to withdraw money. Let imagine that customer can set the rule, any type of larger transfer eg.£500 will trigger message and fraud detection algorithm. I think it is the Jeremy Clarkson one, interesting enough 12 years later, same issue not much technological improvement in the major banks.