- No standardized audit trail
- No way to know who's really on the other side
I think these 2 are the biggest ones. You put in someone's phone number / email, and you get maybe an associated name as reassurance. How do I know it's actually associated with an account the person I'm trying to pay has access to?