Deposit information in the US is account number + routing number, which is all that is required to pull funds from an account. Amusingly, this is also the information printed at the bottom of every check you use.
https://qry5s.sse.codesandbox.io/
Any name Any email address Test account number: DE89370400440532013000
I would imagine the situation in the US to be quite similar.
It would be harder to get back if they did it to your business account and you didn’t notice.
https://battlepenguin.com/tech/the-american-banking-system-i...
To be fair, in Australia all I needed to transfer money was your name and account number and it'd appear within 24 hours. Since I've left, I've heard the system is more real time, with funds showing up in seconds.
You can pull money from accounts the same way in Australia, but I suspect it's limited by business and there are audits in place to stop and reverse fraud.