This is pretty common. NACHA put out a booklet on telephone transactions, detailing the information you would need to disclose and retain. You would have recourse against your loan customer if they committed fraud, for example if they used their neighbors bank account. If you wanted to reduce the possibility of this altogether, you could add a level of security - for example, note the account used for the last mail payment and restrict them to phone transactions against that account.