5 ms·
This doesn't really answer the question though. People steal things all the time. The easier it is to steal the more they do it. Bikes, breaking into cars, purs
by gernb 4y ago
This doesn't really answer the question though. People steal things all the time. The easier it is to steal the more they do it. Bikes, breaking into cars, purses, etc...
We have passwords and two factor to prevent this stuff for lots of situations but in this ACH case we seem to have nothing. What's special about ACH vs all other situations? Why do I need a password and two factor on other accounts but not ACH? It's just as illegal to break into those other accounts is it not?
- tyingq 4y agoYou could hack someone's business bank account and ACH debit other people, yes. But then you have to get the money out of that account, and into cash in your hands without leaving a trail that leads to you. It's possible, but complicated. And if you could do it, there was probably already significant money in the account you hacked into in the first place. No need to pad it with ACH debits that might set off alarm bells.
- deleted 4y ago[deleted]
- bombcar 4y agoYou can't just take money with the numbers. You have to be a bank or otherwise registered with the clearing house. So you can ask your bank to pull money from my account, and if I object my bank will claw back the money from your bank and they will know who you are. And if it wasn't all a misunderstanding or a typo, then they know where to find you.
- sp332 4y agoYou can just take money with the numbers. A business can just ask for ACH account info for payments. That means a customer could use someone else's "numbers" to fraudulently buy thigs. And maybe that other person wouldn't be liable for the fraudulent transaction, but the customer would still have the stuff they bought without leaving an ID behind.
- Sohcahtoa82 4y agoWhat businesses allow you to pay via ACH? Off the top of my head, the only ones I can think of are utilities, other banks (so you can make loan payments), and consumer payment processors like PayPal. In the first two, they'll have your ID. In the latter, they do the "make two deposits" thing to verify you own (or at least have access to) the account. I can't go to Wal-mart and pay via ACH. Do they even take personal checks anymore?
- jsmith45 4y agoOf course they still take personal checks. How else would elderly granny that does not trust "plastic" pay? Some would do it with cash, but many have paid with checks their whole lives, and will not stop until they drop dead. And it certainly used to be common for e-commerce sites to accept "electronic checks" by having you type in the routing and account numbers, with no additional verification. These days, there usually is additional verification. It is still commonly accepted with no verification for payment for things like utility bills. This appears to be on the assumption that if there is check fraud they probably know the guilty party, because who else would be trying to pay your power bill?
- jrockway 4y ago> What businesses allow you to pay via ACH? Pretty much anyone with a Stripe account can accept payments via ACH. https://stripe.com/docs/payments/ach-debit https://stripe.com/docs/payments/ach-debit I worked at an ISP and we definitely appreciated it when our customers paid via ACH instead of credit card. (Less fees.) We were tiny, too; you don't have to be a giant company to get this going.
- riking 4y agoStripe is still "your bank".
- awad 4y agoHappens plenty in B2B but, again, reputational risk is involved
- olliej 4y agoThe question I think is more “why does someone have to give me their account details and so allow me to remove an arbitrary amount rather than me providing my account details knowing that all you can do is give me money?”
- cortesoft 4y agoThe answer is that people DO steal via ACH, just like people rob houses. They are caught and prosecuted. What makes you think no one ever steals via ACH?
- nerdponx 4y agoI actually know someone who was a victim of this, they had written some checks and the recipient had used them to make unauthorized withdrawals. I believe everything was reversed after the police got involved.