Or a dodgy enough place willing to look the other way when setting up the direct debit, because at least as of 9 years ago it was possible to do so when I was selling mobile contracts. Some would do so, and one of those is in jail now; so I guess it's not worth it, but the "validation" definitely wasn't foolproof then
