I imagine the message sent has an option for the receiver to input their bank details and then Monzo sends the money using the Faster Payments Service.
Hopefully, the sender has to authorise the payment from within their app (like 3D Secure) for a little extra security.