When making a payment in the web app, clicking on a recipient will always select the first recipient in the list.
In my case, I have a savings account called Belasting 2022. When clicking it, it will select the first entry, which is Belastingdienst. Difficult to spot, potentially super dangerous when the first entry is someone who isn't going to give you your money back.
Step 1: https://i.imgur.com/I5QVW2S.png
Step 2: https://i.imgur.com/fxpgE7A.png
