They can do exactly that, and they do not need your permission. I would leave the money in the account it arrived into.

-Zeke
_________________________
WWFSMD?