My initial thought was that, with minimal infrastructural investment, Companies House, the UK government site that stores publicly available data on UK registered companies could include an option in which companies could decide to display a secure hash of their sort code / account number made with a common, salted, open-source hash function (ie BCrypt)
Before transferring large amounts of money individuals could either verify bank details via the Companies House website or online banking apps and websites could implement the hash comparison functions.
Would this be usefully functional or are there huge security implications that I am missing? (I'm not a cryptographer)
If the consensus is that this is simple and secure to implement (especially as the gov.uk sites are introducing high quality multi-factor authentication), it is something that I would like to suggest to my local MP.
