> you can sign over something which ways "the person identified by the > following public key is to be permitted to ..." you mean the fraudlent attacker who owned that INR seems to have signed this request for a €1.000.000,49 wire transfer to their iban. a person is not identified by that signature. randt