Americans are not historically leery about giving out checks but, fun fact, we put all the information needed to empty an account on every check.
Why? Long story; legacy systems rule the world. The industry's main defense is a) surveillance of use of accounts, b) reversing transactions which appear fraudulent, and c) aggressively prosecuting fraudsters where their identity can be readily ascertained.
Wait, what? The only thing needed to send a payment is a target account number. So, if banks in US consider that enough info to DEBIT the account then something went terribly wrong there. In Europe, to take money out of the account you need to either
- go to the bank, and show your photo ID to prove that you're you.
- login to online transaction system and prove your identity by knowing the login password and one-time SMS password.
That's why many charity institutions simply put their account number on their website and ask for donations - there's zero risk someone will debit their account.