"authorization form would also allow them to withdraw funds," at a minimum - I'd accept their advice and NOT complete or execute it. This is their bailiwick and they are fully apprised of such items.
I'd also reach out to the Branch Manager to confirm that advice about the client's EFT form as well as request an alternate form that can be utilized - one that is within the normal template/boilerplate form that is utilized/acceptable for the function of direct deposits (only).
Good luck with this and please return to provide the update regarding the final status, okay? TIA |