Mr Fortune: How payments and account access actually work