Hmm, surely there's some kind of support for a pull
request that has to be approved, no?
It seems like requiring the consumer to manually set up a push payment to a company would probably be annoying and error prone, compared to having them entering their details on a website and then the company requesting payment.