It is absolute insanity to DISABLE pasting in the account number when you have to enter it a second time to confirm. Do you want a 12-digit number to be possibly typed in by hand WRONG, or do you want the user to be able to cut & paste a 100% accurate number from their own computer file? I refuse to deal with web pages like yours, so I just disable JavaScript in my browser temporarily and paste in the account number in both spaces. All you are doing is irritating users, NOT making anything safer, and certainly not making anything more accurate. Kinda like Walmart asking to see your receipt when you've already been checked out by a Walmart clerk.