Is It Safe to Share Your IBAN? What You Need to Know

Sharing a bank account identifier with a stranger can feel risky — but with an IBAN, it depends entirely on who is asking and why. This guide explains exactly what someone can do with your IBAN, what they cannot do, and how to recognise the situations where sharing it puts you at risk.

Is It Safe to Share Your IBAN?

For the vast majority of situations: yes. Providing your IBAN to someone who needs to pay you is normal banking practice. Your IBAN is the address where money lands — giving it out is roughly equivalent to giving someone your postal address so they can send you a letter.

When you share your IBAN, you are sharing the routing information that allows funds to be deposited into your account. You are not sharing any credential that would allow someone to move funds out.

What Can Someone Do With Your IBAN?

With your IBAN alone, someone can:

• Send money to your account. This is the intended use — your employer, clients, or family members can transfer funds to you.
• Set up a SEPA Direct Debit mandate (in Europe only). This allows a company to pull payments from your account on a recurring basis — for example, a utility bill or subscription. However, direct debits require your explicit mandate (signature or digital authorisation) in most cases, and you can dispute and reverse unauthorised debits within 8 weeks under SEPA rules.

What Can Someone NOT Do With Your IBAN?

With your IBAN alone, someone cannot:

• Withdraw money from your account
• Access your online banking
• Make purchases or payments on your behalf
• Change your banking details
• See your balance or transaction history

Accessing or emptying a bank account requires authentication — a password, PIN, biometric, or one-time code that only you possess. An IBAN is not an authentication credential.

Real Risks: When Sharing Your IBAN Becomes Dangerous

While the IBAN itself is not a risk, the context in which you share it matters.

Fake Invoice and Supplier Fraud

Fraudsters send fake invoices or impersonate suppliers, asking you to update their payment details. You enter their IBAN into your accounting system, and your next payment goes to the fraudster instead of the legitimate supplier. Your IBAN wasn't compromised here — you were tricked into using the wrong one.

Unsolicited Direct Debit Setup

In theory, someone with your IBAN could attempt to set up an unauthorised SEPA Direct Debit. However, reputable payment processors require a valid mandate, and you have the right to dispute and reverse any direct debit within 8 weeks (or 13 months for unauthorised ones) under SEPA regulations. Banks are required to refund unauthorised debits immediately upon dispute.

Phishing and Social Engineering

The IBAN is rarely the direct target of fraud. More commonly, attackers use it as a stepping stone — combining your IBAN with other personal data to impersonate you or create a convincing fraud scenario. Never share your IBAN alongside your password, PIN, one-time codes, or answers to security questions.

When Is It Safe to Share Your IBAN?

It is safe to share your IBAN with:

• Your employer (for salary payments)
• Clients or customers who owe you money
• Family members sending you funds
• Government agencies (tax refunds, benefits)
• Trusted subscription services and utility companies
• Banks and financial institutions for KYC processes

Red Flags: When to Be Cautious

• Someone asks for your IBAN and your online banking login, password, or one-time codes — stop immediately. No legitimate bank or business needs your password.
• An unsolicited email or message requests your IBAN “to process a refund” or “to verify your identity” — legitimate refunds happen automatically to the original payment source.
• A new supplier or contact sends an urgent request to update their payment details — always verify by calling the supplier directly on a number you already have, not one from the email.

If You Suspect IBAN Fraud

If you believe you have been the victim of IBAN fraud — for example, you sent money to a fraudulent IBAN — contact your bank immediately. Banks can sometimes recall transfers that have not yet been claimed, especially within the first 24 hours. Report the incident to your national financial crime authority.

For more on protecting yourself from IBAN-related fraud schemes, see IBAN Fraud Prevention Guide and How to Prevent Misdirected Payments.

Last updated: June 2026