Most banks officially allow it. I once asked a CSR (when adding a bank acc to a card over the phone) how they could do it since it could be its not authorized, he told me its very simple, we know who you are, so once the bank acc owner notice money missing he trace it to us and we see it went to your CC account.