Yeah seems plausible... Why not have a rate limit to how much you can take out of the account at a given time until they provide some kind of authentication that it is indeed you. An analog to that would be the ATM limit of $400/day and you can walk inside to get as much as you want out.(as long as the account does not have a daily limit for cash transactions.)