Bold claim: unauthorised direct debits can strip a business dry and leave owners powerless, even when you rely on your bank to protect you. Now, explore how one Perth engineer faced that reality—and why the problem isn’t going away anytime soon.
A Perth engineering business owner, Mark Bossong, says about $60,000 was siphoned from his company accounts through unauthorised direct debits since December 2025. When he reached out to his bank, ANZ, the transactions were reversed and the funds returned, but the bank then told him it could not stop further unauthorised debits and that his only option might be to close the accounts. None of the withdrawals had his or his staff’s approval.
Bossong spoke with ABC Radio Perth’s Nadia Mitsopoulos, explaining that ANZ could not block direct debits and that further investigation would need to be undertaken by police. He recalled the bank’s warning: guard your BSB and account number and be careful who you share them with. His response was pointed: these details appear on every invoice issued to customers, and he often shares them with clients. “This isn’t a credit card. This is just my bank account,” he emphasized.
The withdrawals were described as relentless. Each unauthorised debit required about two hours on the phone to report, and Bossong grew frustrated that the bank hadn’t offered a more robust solution.
In a complaint response dated February 26, ANZ stated: there were no errors in how the accounts were managed or in the bank’s handling of the unauthorised activity. The bank said it acted in line with the BECS (bulk electronic clearing system) direct debit framework, standard banking practices, and regulatory obligations. While ANZ said it monitors for suspicious activity, it cannot guarantee that no further unauthorised debits will occur. The bank has not replied to ABC for a comment on Bossong’s case.
Bossong has filed a police report with WA Police and lodged a complaint with the Australian Financial Complaints Authority (AFCA) about how the matter was handled. Meanwhile, his business has had to implement a complex workaround to curb withdrawals, which have continued.
Over the past weeks, Bossong reported multiple attempts—ranging from a few hundred dollars up to eight thousand dollars—that nearly drained funds. To protect the company, he said they now block and unblock accounts as needed to complete transactions: they call the bank to temporarily lift the block for a single transaction, then re-apply the block. He described this as the only viable safeguard available at the moment.
AFCA acknowledged an uptick in direct-debit complaints but declined to comment on Bossong’s case. They noted that in 2025, the average number of direct-debit transaction complaints rose to about 33 per month, rising to 60 in January 2026.
With the ongoing struggles, Bossong plans to move his accounts to another bank, seeking better local support and clearer communication. He believes the core issue is broader than one business’s misfortune and argues that structural changes to the direct-debit system are necessary.
Some affected withdrawals have been traced to a company that processes direct debit transactions for gym memberships. Bossong explained BECS is designed to allow authorised direct debits, but in practice, third parties can sign up through this platform and initiate debits, which raises concerns about regulation and safeguards.
He argues that the system should allow individuals to share their bank details with confidence that withdrawals can be halted if a debit has not been properly authorised. He stressed that BSB and account numbers are not inherently private and are frequently exchanged—for employers, gyms, and even friends who owe you money—so stronger protections are essential to prevent abuse.
