Not sure where you're from, but here direct debit requires setting up "direct debit agreement" by the owner of the account, that specifies account number the debit comes from, how often and maximum amount.

So you setup something like "account 123 can debit up to 100 EUR monthly" and the bank enforces that.