When funds didn't show we contacted our bank. The bank said as long as we didn't share pin and password we would be OK. However, the scary thing is they could potentially set up a direct debit using the minimal details I gave them. So bank have placed a stop on any new direct debits and will call us to verify any in the future.
Just be careful - it all looked plausible!