This is why Plaid is so successful, it allows banks/fintech companies to validate that the information on the counterparty account matches what you claim, that it has sufficient amount, name and email matches.
The bank can also decide if he wants to deny an ACH debit or do a manual review of it, for example above a specific amount of if its the 1st ach debit.
Also the clearing days (when you will see money in your bank) will be different depending on different risk factors.
You can read more here about how to mitigate ACH fraud with tools such as Plaid - https://guides.unit.co/fraud-and-disputes/
disclaimer - I am an engineer at Unit.