# Payment account question/suggestion

**URL:** <https://bisq.community/t/payment-account-question-suggestion/286>\
**Category:** Uncategorized\
**Created:** [July 10, 2016, 4:57pm UTC](https://bisq.community/t/payment-account-question-suggestion/286 "2016-07-10T16:57:11Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![leo](https://bisq.community/letter_avatar/leo/32/6_22734026db12803ebb3e059622ac3534.png) [@leo](https://bisq.community/u/leo)\
**Post date:** [July 10, 2016, 4:57pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/1 "2016-07-10T16:57:11Z")

</div>

Hi,

1- I have two payment accounts for Brazilian National Bank Transfer added on Bitsquare.  
2- I accepted an offer of selling bitcoins and clicked next (I didn’t choose the correct payment account on payment info)  
3- The payment account that was selected is from my bank account that have no more limits to transfer this month.  
4- I will do a transfer from my other bank account that is not on the contract. Will I have problems?

Suggestion: If users have more than one bank account, I think Bitsquare should allow select the two or more.

---

<div class="post-metadata">

**Author:** ![marc](https://bisq.community/letter_avatar/marc/32/6_22734026db12803ebb3e059622ac3534.png) [@marc](https://bisq.community/u/marc)\
**Post date:** [July 10, 2016, 9:01pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/2 "2016-07-10T21:01:27Z")

</div>

Your case makes me think if it should a more active decision which payment account you choose.

Strictly speaking, you’re breaking the contract by using a different bank account and therefore won’t receive btc + security deposit. You really shouldn’t do that.

1. Your best way to solve that is that you transfer funds to the correct bank account an pay from there, if that is possible.

2. Otherwise you can pay from the ‘wrong’ bank account and ‘hope’ that the seller doesn’t care and ‘confirms payment received’. But you have to notice that sellers are advised to not confirm if they receive money from a different acount as there is a chance it’s a scam attempt.

---

<div class="post-metadata">

**Author:** ![leo](https://bisq.community/letter_avatar/leo/32/6_22734026db12803ebb3e059622ac3534.png) [@leo](https://bisq.community/u/leo)\
**Post date:** [July 12, 2016, 12:37am UTC](https://bisq.community/t/payment-account-question-suggestion/286/3 "2016-07-12T00:37:58Z")

</div>

Hi,

I paid with a different bank and he released the bitcoins.  
But I think something should be done by Bitsquare devs to avoild this kind of things. As I said, maybe add more than one bank account on contract.

Obs: I really didn’t know if the trade goes to disput, I’ll lose it.

Something should be done to improve this.

Thanks

---

<div class="post-metadata">

**Author:** ![marc](https://bisq.community/letter_avatar/marc/32/6_22734026db12803ebb3e059622ac3534.png) [@marc](https://bisq.community/u/marc)\
**Post date:** [July 12, 2016, 7:31am UTC](https://bisq.community/t/payment-account-question-suggestion/286/4 "2016-07-12T07:31:59Z")

</div>

I agree. It should be very clear which bank account you use.

You gotta understand that there are attacks (Man in the middle attacks) where the attacker tricks one person into paying for bitcoins the attacker receives. Therefore sellers shall only accept payments from specified accounts, using a distinct ‘reason for payment’.

Right now, there are no (as far as I know) scammers at bitsquare but it might become a problem in the future.

By the way, it’s the same procedure at other trading platforms. The process is very similar at [bitcoin.de](http://bitcoin.de), for example.

Nevertheless, I’m glad it worked out for you as I’m sure you have no bad intentions.

---

<div class="post-metadata">

**Author:** ![BetterSquare](https://bisq.community/letter_avatar/bettersquare/32/6_22734026db12803ebb3e059622ac3534.png) [@BetterSquare](https://bisq.community/u/BetterSquare)\
**Post date:** [July 12, 2016, 3:41pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/5 "2016-07-12T15:41:51Z")

</div>

Good point. Recently someone took my sell offer and it didn’t even occur to me to check bank details. I just looked at the trade ID and the amount in the incoming bank transfer, it matched and I released the BTC.

But I could see attacker A opening an account on Bitsquare, somehow finding a bitcoin buyer B elsewhere (LocalBitcoins, Craigslist, …) and at the same time accepting an offer from a bitcoin seller S on Bitsquare. Then A gets the bank details from S and gives those details to B to pay for the fake purchase from A. B thinks he is paying A, but in reality pays S, S receives payment and releases bitcoin to A.

So it’s important for S to see that the incoming transaction is, in fact, from A and not from B. However, since bank details are not verified on Bitsquare, what would prevent A from asking B about his banking details (“make sure I can match your incoming transfer”) and enter B’s details as his own on Bitsquare?

---

<div class="post-metadata">

**Author:** ![marc](https://bisq.community/letter_avatar/marc/32/6_22734026db12803ebb3e059622ac3534.png) [@marc](https://bisq.community/u/marc)\
**Post date:** [July 12, 2016, 5:20pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/6 "2016-07-12T17:20:50Z")

</div>

Risk by man-in-the-middle-attack is being adressed [on Github](https://github.com/bitsquare/bitsquare/issues/373).

---

<div class="post-metadata">

**Author:** ![ManfredKarrer](https://bisq.community/user_avatar/bisq.community/manfredkarrer/32/26_2.png) [@ManfredKarrer](https://bisq.community/u/ManfredKarrer)\
**Post date:** [July 12, 2016, 5:24pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/7 "2016-07-12T17:24:44Z")

</div>

In the upcoming version there is the bank details of the sender displayed at the confirm popup with an extra emphisis to only confirm payments if the bank details are matching.

---

<div class="post-metadata">

**Author:** ![mirelo](https://bisq.community/user_avatar/bisq.community/mirelo/32/111_2.png) [@mirelo](https://bisq.community/u/mirelo)\
**Post date:** [July 13, 2016, 4:10pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/8 "2016-07-13T16:10:54Z")

</div>

Some banks show the tax registration number of the source of a transfer, which has gone through identity verification by the bank. Once you had a successful trade with someone, it should be enough to check for that number in subsequent trades, even with different bank accounts. Of course, this procedure is useless in the first trade.

---

<div class="post-metadata">

**Author:** ![ManfredKarrer](https://bisq.community/user_avatar/bisq.community/manfredkarrer/32/26_2.png) [@ManfredKarrer](https://bisq.community/u/ManfredKarrer)\
**Post date:** [July 13, 2016, 4:28pm UTC](https://bisq.community/t/payment-account-question-suggestion/286/9 "2016-07-13T16:28:38Z")

</div>

On which country do you refer? In Europe (SEPA) I never saw any tax number.
