09-27-2012 01:47 PM
To do eCheck stuff you get the account number, routing number and customer name, among other things. How do you verify that the user submitting the info is indeed the owner of the account?
Does authorize.net check to see if the name matches the account holder? What if they type in Bill Gates and their name is William Gates or something?
09-29-2012 01:50 PM
Judging from this, there's both some form of numeric validation, as well as name matching against the account:
R03: The account number passes digit validation, but does not correspond to the individual identified in the entry, or the account number designated is not an open account and has not been open in the past.
I'm guessing this depends on the customer's bank.