Please do not disable paste for the second entry of account number. This is:
1) super annoying and a really crappy UX
2) more error prone because most folks have these stored in a secure password manager anyway (a better solution would be to disable copy of the original if you think that is really what folks will do)
3) easily worked around with some javascript in the console or add-ons like Don’t F*ck with Paste