Yes!  Look up ACH fraud. ACH is such an antiquated system. The only pieces of information that you need to do an ach pull (transfer) is the routing number and account number. Lo and behold, this is the same information that is on every check that you give out.<p>Edit:<p>To answer the other part of your question, originating financial institution (ODFI) can issue a chargeback up to 60 days after the money was sent.  Unlike credit cards, there isn&#x27;t a process for the merchant&#x2F;service provider to refute the dispute.<p>So, the bank account owner can dispute the ACH transfer with their bank a month and a half later and it pretty much assured that they&#x27;ll get their money back.  Their bank isn&#x27;t going to fight their own customer for it.