How to Verify Bank Details Before a Transfer
Quick answer: how should you check bank details?
Before a transfer, verify the recipient, IBAN, amount, reference and reason for payment. Check the IBAN technically, then confirm unusual or changed payment instructions through a trusted channel. A formal IBAN result is useful, but it is not proof that the recipient is genuine.
Run the number through our IBAN validator before approving the transfer.
A practical verification checklist
- Confirm the source: use an official invoice, contract or secure account message.
- Compare the recipient: check the legal name and known contact details.
- Check the IBAN: validate the country format, length and check digits.
- Review the payment: compare amount, currency, reference and due date.
- Investigate changes: verify new bank details by calling a known phone number.
The IBAN structure guide explains what a technical check can detect.
What an IBAN validator can and cannot do
Validation can identify many typing and formatting errors. It cannot confirm that a bank account is open, that the account holder is the intended recipient or that a payment request is legitimate. Treat the result as one control in a wider payment process.
What to do with changed supplier bank details
Changes to payment instructions deserve extra care. Do not rely only on the contact details in the change request. Use a previously known number or portal, ask for confirmation and keep the original request for your records.
If the wrong number was already used, act quickly and read what to do with an incorrect IBAN.
Why bank-detail verification needs several layers
Bank transfers are difficult to reverse once they have been released, so the payment process should not depend on one green validation result. A technical check answers whether the IBAN follows the expected country rule and whether its check digits are consistent. Identity verification asks whether the account belongs to the intended recipient. Process verification asks whether the request came from an authorized person and whether the invoice itself is genuine.
These layers are especially important when a supplier changes bank accounts, when a new beneficiary is added, or when a payment is urgent and unusual. Fraudsters often use correct-looking account numbers and pressure staff to skip the independent confirmation step.
A practical verification checklist
Before approving a transfer, compare the beneficiary name, address, invoice number, amount and currency with the purchase record. Check the IBAN for country, length and check digits using the IBAN checker. If the details are new or have changed, confirm them through an existing contact channel, such as a known telephone number or a supplier portal. Do not use the phone number included in a suspicious change request as your only verification source.
For a high-value transaction, use dual approval or a call-back procedure. Record who supplied the bank details, who confirmed them, when the check was performed and which source was used. A short record makes later investigation easier and discourages informal changes to payment master data.
What an IBAN check can detect
The check can identify a wrong country prefix, an incorrect length, unsupported characters and an invalid mathematical check digit. It is useful for catching typing mistakes before money leaves the account. It may also expose a number copied from the wrong country or a value with missing characters.
The check cannot tell you whether an account is open, whether it accepts the intended currency, whether the account holder is the supplier named on an invoice, or whether the payment is connected to a scam. Some banks offer beneficiary-name confirmation or account verification, but the availability and legal effect of those services differ by country and bank.
Handling changed bank details
Treat a change of IBAN as a sensitive master-data change. Require a clear reason, confirm the change with the supplier using contact information already stored in your system, and consider a small test or additional approval where appropriate. Keep the former details in an audit history rather than deleting them without a record. If the request conflicts with a contract or previous invoice, pause the payment until the discrepancy is resolved.
Do not allow urgency to replace evidence. Legitimate suppliers can usually confirm their payment details through a known channel. If an employee has already sent money to a suspicious account, contact the bank immediately and report the incident through the organization’s fraud process.
Designing a repeatable business process
For small teams, a checklist and call-back rule may be enough. Larger teams can restrict who may edit beneficiary data, require a second approver, and log every change. Automated validation should run when details are entered, but it should not silently approve a beneficiary. Show the technical result separately from the identity and approval status so staff understand what still needs attention.
Separating technical and human approval
Payment software should show a technical IBAN result separately from the approval status. A valid check digit can be displayed as “format valid”, while the beneficiary confirmation and invoice review remain separate steps. This makes the process easier to audit and prevents staff from assuming that an automated result has approved the payment.
For recurring suppliers, define who may create or change a beneficiary and who must approve the first payment. Review the procedure after a fraud attempt or a change in banking systems. Small teams can use a written checklist; larger teams can add access controls, call-back workflows and an audit log.
Keep approval states separate
Show “format valid”, “beneficiary confirmed” and “payment approved” as separate states. This makes clear that an automated check has not silently approved the recipient. A short audit record should identify the source, date and person responsible for the final decision.
FAQ: checking bank details
Does a valid IBAN guarantee a safe transfer?
No. It confirms technical plausibility, not the identity of the recipient or the legitimacy of the payment request.
Should you call a supplier when bank details change?
For important payments, independent confirmation through a known contact channel is a sensible control.
Can a name and IBAN be checked automatically?
It depends on the bank and payment service. A basic IBAN check normally focuses on the number’s structure and check digits.
Summary
Verify bank details in layers: trusted source, recipient, IBAN, payment context and independent confirmation for changes. Start with a technical IBAN check, but do not treat it as an identity guarantee.