I've seen several processes that utilize the ID/password controls. Some of these have strengthened controls to include callbacks over a certain amount. I have also seen some that permit "repetitive wires" with no callbacks(special coding exists to ID wire); all other wires would require callback.
As Randy referenced, the contract and customer agreement are critical in establishing responsibilities when relying on online wire transfer programs.
Life without Jesus is like an unsharpened pencil - it has no point.