We work with the banks and a number of third-party identity-checking providers to verify that the bank details match the identify given. There's also a lot of additional stuff going on to match the person at the keyboard with the identity provided.

It's worth noting that there's a very strong consumer guarantee in case of fraud: http://www.bacs.co.uk/bacs/businesses/directdebit/collecting...