Hi Kevin,
You are correct that it is not easy for someone to draw from your bank account. But it is not impossible, according to the bank CFO that I spoke to. Making a withdrawal from someone's bank account electronically is done by using an ACH (Automated Clearing House) transaction. To initiate an ACH, the originator has to get written, verbal or electronic authorization from the account holder. This is where the loophole is in the process. All the originator has to do is to provide something showing that you agreed to the withdrawal by a recording from a telephone conversation, a document with a signature or by presenting something showing that the account holder agreed by checking an “I Agree” button on a web site. All of these things are easy to forge or falsify. Once the transaction is done, it is up to the account holder to prove that they did not give permission for the transaction. I have actually had an ACH drawn on my account by a non-profit organization who claimed to have a recording of me agreeing to make a donation over the phone.
If the unauthorized transaction originated in the US, federal banking laws make it fairly simple to get your money back; after you prove that you did not authorize the transaction. However, if the ACH originated outside the US, the process for recovering the money can be much more complicated and there could be no cooperation at all from the bank where the ACH originated.
Yes, there are risks in most all financial transactions and true is your statement that not taking risks puts you at a disadvantage. I only meant to point out that there are some risks in giving out your account information for wire transfers, for those who were not aware.