2 ms·
> Bank account details aren't typically regarded as (worth keeping) secret This is precisely my point. People are not terribly worried about others (including
by Cu3PO42 5y ago
> Bank account details aren't typically regarded as (worth keeping) secret
This is precisely my point. People are not terribly worried about others (including merchants) knowing their IBAN. They are worried about their credit card.
However, a malicious actor can cause you much of the same trouble with your IBAN as they can with your credit card number. It is therefore illogical, in my opinion, to be worried about one much more than the other.
> to the extent that many businesses are happy to stick their IBAN on their website.
These accounts almost always block direct debit, therefore they don't run these risks.
- logifail 5y ago> a malicious actor can cause you much of the same trouble with your IBAN as they can with your credit card number I disagree with this. A malicious actor may be able to cause some trouble if they have your IBAN, but it would appear to be significantly harder to steal money _and get away with the crime_ using an IBAN compared with someone's credit card details. In the Jeremy Clarkson story from 2008, someone set up a direct debit to a charity using bank account details. Given the hoops you have to jump through to be able to be able to set up a direct debit - and knowing that KYC would apply to the receiving bank account - it would appear to be significantly harder to profit from money withdrawn in this way. With a stolen credit card you can purchase something online from a merchant that isn't obliged to do any KYC checks and the fraudster is gone long before the crime is detected.