Answer:
This is really a question of authentication and adequacy of controls. If your bank's online banking system has access controls that can reasonably be depended upon to thwart attempts by unauthorized persons to access or to use the system, you may be satisfied that your authentication and controls are sufficient. I am aware of at least one bank that sends an email to the registered email address for the account and, on a sampling of changes, a first class mail notice that the address was changed via the online system.
First published on BankersOnline.com 3/21/05