SecurCheckCyber Centre

BANK DETAILS · IBAN · TRANSFER · SUPPLIERS

How to check bank details before a transfer: an IBAN guide

Secur Cloud ·

A transfer sent to the wrong account can be difficult to recover once executed. A transcription error, altered invoice or fraudulent change of bank details can put funds at risk. Contact your bank immediately if something goes wrong: a recall may be attempted, without guaranteed recovery, and your rights depend on the circumstances.

Here is how to use an IBAN checker as a first step, then complement that technical check with independent payee confirmation.

1. Decode the technical structure of an IBAN

ISO 13616 defines the international IBAN format. Length and national components vary by country.

Country and international check digits

The first two letters indicate the account country (FR, DE…), followed by two check digits validated with modulo 97. A valid checksum helps detect transcription errors, but a fraudster can supply a mathematically valid IBAN. It proves neither that the account exists nor who owns it.

National account number and French bank code

A French IBAN has a 23-character national component: five digits for the bank code, five for the branch, eleven characters for the account and two for the domestic RIB key. SecurCheck extracts the French bank code but does not reliably resolve the bank’s name.

2. Assess geographic and banking consistency

Correct structure is necessary but insufficient to authorise payment.

Geographic mismatch: check the context

Compare the IBAN country with your supplier’s established details. A French supplier may legitimately use an account in another country. An unexpected difference, particularly after changed bank details, warrants independent confirmation rather than an automatic fraud verdict.

BIC/SWIFT: a separate check

A BIC identifies a bank for some payment processes. If one is provided, check it with your banking interface or bank. The IBAN checksum alone cannot certify that match. SecurCheck does not validate BIC/SWIFT or directly verify account ownership.

Strengthen your company payment controls

SecurCheck Business helps finance teams check bank details before payment: length, format, modulo-97 checksum, country and, for French IBANs, bank code. The tool can compare an IBAN with a supplied reference and flag other document discrepancies for review.

It does not confirm account ownership or replace bank-side VoP, an independent callback or dual approval.

Explore our business offer

3. Checks before approving a transfer

  1. Use your bank’s Verification of Payee

    Since October 2025, Verification of Payee (VoP) compares the payee name and IBAN for applicable SEPA transfers. Review your bank’s response and investigate mismatches before confirming. This bank-side check is different from SecurCheck’s mathematical validation and does not replace independent confirmation of a bank-detail change.

  2. Separate entry from approval

    Have one person enter bank details and another approve payment under your organisation’s authorisation rules. For a new payee or a change, call the supplier using a previously verified number, never one in the suspicious message.

  3. Review the document and retain evidence

    Compare the bank details against previous records and contract documents. Even an apparently original PDF or genuine invoice can be intercepted and altered; the document alone cannot prove account ownership. Retain the request, checks and independent callback record.

Banque de France: SEPA transfers and payee verification

Conclusion: combine technical and human checks

A suspicious-IBAN checker catches formatting errors and highlights discrepancies. Protect payments by combining its results with your bank’s payee verification, an independent callback for changes and separation of duties. No single score guarantees a risk-free transfer.

Discuss SecurCheck Business for finance teams