By granting view only access to a subuser, you can prevent transfers between accounts.