We do have measures in place to protect ourselves and we appreciate your comments. There's always more that we can do.
It's also worth noting that an employer and employee have given all of the normal KYC information and have connected bank accounts so while the BTC wallet is "anonymous" on the network, we can link it to a specific person. The danger is near the same level as someone getting the money via ACH and immediately withdrawing in cash. (Many banks immediately mark the deposit as not-pending).
I'm not saying that there's not risk. Just that the risks are fairly similar even though the network is different.
Also I think what Tony was saying about debits only company side, is that we're only debiting company accounts which does decrease the fraud level vs a situation where we allowed an a personal account to be debited and money sent somewhere.