3 ms·

You can just take money with the numbers. A business can just ask for ACH account info for payments. That means a customer could use someone else's "numbers" to

by sp332 4y ago

You can just take money with the numbers. A business can just ask for ACH account info for payments. That means a customer could use someone else's "numbers" to fraudulently buy thigs. And maybe that other person wouldn't be liable for the fraudulent transaction, but the customer would still have the stuff they bought without leaving an ID behind.

Sohcahtoa82 4y ago
What businesses allow you to pay via ACH? Off the top of my head, the only ones I can think of are utilities, other banks (so you can make loan payments), and consumer payment processors like PayPal. In the first two, they'll have your ID. In the latter, they do the "make two deposits" thing to verify you own (or at least have access to) the account. I can't go to Wal-mart and pay via ACH. Do they even take personal checks anymore?
- jsmith45 4y ago
  Of course they still take personal checks. How else would elderly granny that does not trust "plastic" pay? Some would do it with cash, but many have paid with checks their whole lives, and will not stop until they drop dead. And it certainly used to be common for e-commerce sites to accept "electronic checks" by having you type in the routing and account numbers, with no additional verification. These days, there usually is additional verification. It is still commonly accepted with no verification for payment for things like utility bills. This appears to be on the assumption that if there is check fraud they probably know the guilty party, because who else would be trying to pay your power bill?
- jrockway 4y ago
  > What businesses allow you to pay via ACH? Pretty much anyone with a Stripe account can accept payments via ACH. https://stripe.com/docs/payments/ach-debit https://stripe.com/docs/payments/ach-debit I worked at an ISP and we definitely appreciated it when our customers paid via ACH instead of credit card. (Less fees.) We were tiny, too; you don't have to be a giant company to get this going.
  - riking 4y ago
    Stripe is still "your bank".
- awad 4y ago
  Happens plenty in B2B but, again, reputational risk is involved
edgyquant 4y ago
This business would run the risk of being cut off from the financial system.
- cowtools 4y ago
  Okay, but the business has no way of stopping this attack, so it is fruitless.
  - deleted 4y ago
    [deleted]

by sp332 4y ago

Sohcahtoa82 4y ago

What businesses allow you to pay via ACH? Off the top of my head, the only ones I can think of are utilities, other banks (so you can make loan payments), and consumer payment processors like PayPal. In the first two, they'll have your ID. In the latter, they do the "make two deposits" thing to verify you own (or at least have access to) the account. I can't go to Wal-mart and pay via ACH. Do they even take personal checks anymore?

jsmith45 4y ago
Of course they still take personal checks. How else would elderly granny that does not trust "plastic" pay? Some would do it with cash, but many have paid with checks their whole lives, and will not stop until they drop dead. And it certainly used to be common for e-commerce sites to accept "electronic checks" by having you type in the routing and account numbers, with no additional verification. These days, there usually is additional verification. It is still commonly accepted with no verification for payment for things like utility bills. This appears to be on the assumption that if there is check fraud they probably know the guilty party, because who else would be trying to pay your power bill?
jrockway 4y ago
> What businesses allow you to pay via ACH? Pretty much anyone with a Stripe account can accept payments via ACH. https://stripe.com/docs/payments/ach-debit https://stripe.com/docs/payments/ach-debit I worked at an ISP and we definitely appreciated it when our customers paid via ACH instead of credit card. (Less fees.) We were tiny, too; you don't have to be a giant company to get this going.
- riking 4y ago
  Stripe is still "your bank".
awad 4y ago
Happens plenty in B2B but, again, reputational risk is involved

edgyquant 4y ago

This business would run the risk of being cut off from the financial system.

cowtools 4y ago
Okay, but the business has no way of stopping this attack, so it is fruitless.
- deleted 4y ago
  [deleted]