That's fine, but if I give you my IBAN and name on the account, you can only send money to me... Well and commit actual fraud/identity they by forging my signa

That's fine, but if I give you my IBAN and name on the account, you can only send money to me... Well and commit actual fraud/identity they by forging my signature maybe... But we don't see that happen on a large scale because it just isn't feasible/worth it. We would see it otherwise as I'm sure there are plenty of datasets with those pieces of info to be bought..