We're setting up a web site for a non-profit organisation and want to accept payments for subscriptions. We have set up a PayPal business account to accept PayPal payments but unless we upgrade to a Pro account (which costs £20/month) we can't accept direct card payments, the payer has to create a PayPal account.
This is probably OK for individuals but we are also aiming to accept subscriptions from 'organisations' and they may not be keen to create PayPal accounts.
So, how secure (for us) would it be to publish our bank sort code and account number so payers can use BACS? I've done a little searching and it seems it should be fairly safe, the only issue is people trying to set up DDs with the details and that should be instantly detectable. Lots of organisations *do* publish sort code/account number details - e.g. HMRC, credit cards, etc. - so if there was a serious problem with doing this they would have been caught by it wouldn't they? .... or is there some sort of account you can set up that only allows incoming BACS and no automated outgoings?