I've heard of this and am not 100% sure there is a good answer, unless the bank is specific in its communication with the consumer describing the transfer and that they have the option to block it at that moment. If the consumer authorizes it specifically with transaction facts, I would decline a claim based on the specific authorization by the consumer. The claim is to determine if the transfer was done by the consumer, if they authorized someone else to do it, or benefitted from it. A thorough process getting approval establishes they authorized it, personally.
If there is doubt as to what is being asked - specifically, then the consumer has not agreed to anything specifically, and there is room for a claim as a consumer protection.
My opinions are not necessarily my employers.
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell