About a month ago this topic came up and I commented this about “just” creating a new Visa: https://news.ycombinator.com/item?id=44611807
There are services where you enter your username and password for your bank, and they log into your online banking for you, and make a giro transfer outwards, and they can confirm the transfer was sent because they sent it. Bank security departments don't like this, but they can't always do anything about it.