Wait, where in the world does that happen?

..don't tell me that in the US if someone has your banking details they can do literally anything they want, and just empty your account

this. it sorta annoys me putting in the payee endpoint as well. You should be able to get a number or code or whatnot from the place wanting payment and it will setup the payee endpoint and give you a code. You should then be able to purchase something and give the payee the code which they can do to send a bill to whats setup at your bank. then you go and authorize the payment and of course someone could set it to always accept payments from the payee if they are lazy. It also super annoys me that there is not more options on bank accounts. I want my savings to only allow transfers out to specific accounts I setup. Like my checking. Not allowing any transfers from other institutions. The checking can then be open and I can trasfer there before doing something else with it. Any type of transfer should always do a balance check and not go if insufficient balance is available with no fee.