to withdraw a balance, only check account ID
to deposit a balance, need to check both account name and account ID, even address.
I think this is the best way, and can avoid to sent to a wrong receiver even if he have update the public key.
sever can't cheap client with a wrong ID, or wrong address.