Popular payment processors (Stripe, Balanced, Braintree) all allow you to make payouts to customers...and ask for info to verify the recipient's identity along with bank account information. However, they don't ensure the identity you provide is the person (or business) that actually owns the bank account...meaning I could theoretically provide the identity of someone else (i.e. fake someone's identity) along with the bank details of an account I control. Is this some crazy security loophole or not as bad as I am picturing it?
