It depends on what country you're in but in Germany this is possible. Businesses can just withdraw from your account. You can dispute this for a number of weeks though and can get it back. The business then needs to prove that you authorised them to withdraw the money.