Yes, there is a security question & answer that is established for the Contact by the Sender when adding the Contact to their list of payees.  The question and answer are secret between the two parties and the Sender must share the information before sending the payment.  The security question will be used each time by the Contact for any changes they need to make to their payment instructions.  After 3 failed attempts the service will be locked.