It's far too easy to gain access to my funds

I received an SMS notification that an EFT payment went down on my account and I did not recognise the reference. I contacted Absa and they pointed me towards a company called Digicash, Digicash said they handle EFT transfers on behalf of other companies, and that my subtraction was for a company called NHL Direct. I spoke to a person from NHL Direct who, after a two day long investigation, found that the subtraction was due to an agent taking down customer information incorrectly. They have agreed to correct this and reimburse me for the funds deducted, but I find it unsettling that they were able to just take money from me without my consent showing up anywhere in the process. Should Absa not have better security? What if this was deliberate? What defense would I have against malicious individuals who obtain my account details and place EFT's all over my account for nothing? What if I did not have SMS Notifications and I never learned about this transaction happening until I received a statement and studied it in detail?