Why Digital Banks Are Warning Customers and What EU Law Says About It
TL;DR Summary: IBAN discrimination is the practice of refusing to accept a valid IBAN from an EU or EEA country solely because it originates from a different member state. This practice is explicitly prohibited by Article 9 of EU Regulation 260/2012, which governs the Single Euro Payments Area. Despite the legal prohibition, the Accept My IBAN initiative received 4,688 consumer complaints between 2021 and early 2025, with France, Germany, Spain, and Italy generating the highest complaint volumes. Digital banks are particularly affected because their IBANs frequently carry country prefixes that differ from the customer's country of residence, triggering unjustified refusals by businesses, employers, insurers, and public bodies.
What IBAN Discrimination Is and Why It Persists
An International Bank Account Number is a standardised alphanumeric identifier that uniquely identifies a bank account within the Single Euro Payments Area and beyond. Every IBAN begins with a two-letter country code, such as FR for France, DE for Germany, or ES for Spain, followed by check digits and the account-specific number sequence. The country code identifies the jurisdiction in which the account is held, not necessarily where the account holder resides. A German citizen living in France who uses a German digital bank holds a DE-prefixed IBAN; a Spanish freelancer using a fintech with Irish registration holds an IE-prefixed IBAN. In both cases, the IBAN is legally valid for receiving payments and setting up direct debits throughout the SEPA zone.
IBAN discrimination occurs when a business, employer, insurer, utility, or public authority refuses to process a payment from or to an account because its IBAN carries a country prefix different from the one they expect. This can manifest as a company's payment system rejecting a direct debit mandate, an employer's payroll system refusing to credit a salary to a foreign-prefixed account, a landlord's platform declining rent payments from a non-domestic IBAN, or a public administration refusing to process benefit payments to an account held in another member state. In each case, the technical barrier or policy decision that produces the refusal is a breach of EU law, even if the company imposing it is unaware of this fact.
The EU Legal Framework Prohibiting IBAN Discrimination
Article 9 of Regulation (EU) No. 260/2012, commonly referred to as the SEPA Regulation, establishes the legal prohibition on IBAN discrimination in direct and unambiguous terms. The regulation states that a payer or payee cannot specify the member state in which the account to be debited or credited is located, when that account is reachable within the SEPA framework. This is a directly applicable rule, meaning it takes effect in all EU member states without requiring transposition into national law. The practical legal consequence is that any business, professional, or public administration operating within the EU is bound by this rule from the moment the regulation came into force.
The Geo-Blocking Regulation, which entered into force in December 2018, adds a further layer of protection by prohibiting different conditions for payment transactions based on a customer's nationality, place of residence, or the location of their payment account. Together, these two instruments create a clear legal framework within which every EU-registered IBAN must be accepted for SEPA credit transfers and direct debits across all member states. Despite the clarity of the law, enforcement remains fragmented, penalties are inconsistent across member states, and many businesses that engage in IBAN discrimination do so without awareness that their conduct is unlawful.
Why Digital Bank Customers Face the Highest Risk
Customers of digital banks and fintech platforms face a disproportionately high risk of encountering IBAN discrimination because the IBANs issued by these institutions frequently carry country prefixes that do not match the country in which the customer lives. Revolut, regulated in Lithuania, issues IBANs with an LT prefix to many European customers regardless of whether those customers are resident in France, Germany, Spain, or elsewhere. Wise, regulated in Belgium for some products, may issue BE-prefixed IBANs to customers across Europe. Monzo, regulated in the UK, issues GB-prefixed IBANs. When a customer with a French address presents a Lithuanian IBAN to set up a salary credit or a direct debit for a gym membership, the company's payment system or staff may incorrectly reject it as invalid for French transactions.
This dynamic creates a two-tier outcome where customers of traditional domestic banks experience seamless payments acceptance while customers of digital-first institutions face administrative friction, repeated rejections, and in some cases the need to maintain a separate domestic bank account solely to work around the IBAN discrimination they encounter. The European consumer organisation BEUC has characterised this outcome as preventing consumers from benefiting from better financial services available across EU member states, directly undermining the objectives of the European single market.
Countries and Sectors Where IBAN Discrimination Is Most Common
According to the Accept My IBAN initiative, which is led by Wise and serves as the primary European reporting channel for IBAN discrimination cases, France and Spain account for the largest share of complaints by destination country, at 27% and 19% of merchant-side cases respectively, followed by Germany at 17% and Italy at 12%. The total number of complaints received by the initiative grew from approximately 3,500 in the period from February 2021 to September 2023 to 4,688 between 2021 and early 2025, indicating that the problem is growing rather than diminishing despite the regulatory framework in place.
The sectors most commonly involved in IBAN discrimination include insurance providers, utilities, landlords and property management companies, telecommunications operators, financial institutions, employers' payroll systems, and public sector bodies including tax authorities and social benefit administrators. The European Court of Auditors' special report on digital payments in the EU, published in early 2025, confirmed that IBAN discrimination remains an unresolved issue more than a decade after the SEPA Regulation was enacted.
Real-World Examples of IBAN Discrimination
The types of real-world cases documented by the ECC-Net, the Accept My IBAN initiative, and national enforcement authorities illustrate the breadth of the problem. A resident of Luxembourg with a holiday property in France who wishes to pay French home insurance via direct debit from their Luxembourg account is refused because the insurance company's system does not process non-French IBANs. A mobile worker in Germany whose employer pays salary only to DE-prefixed accounts cannot use their Revolut LT IBAN to receive their wage. A freelancer in Spain using a Portuguese fintech account is refused by a client who insists on an ES-prefixed account for invoice payment. A family paying school fees in Italy is told the school's system does not accept non-Italian IBANs for the direct debit mandate.
In Germany, the Wettbewerbszentrale, the competition law enforcement body, reported a 30% increase in IBAN discrimination complaints in 2024 compared to prior years and noted that the most common reason given by non-compliant companies is the use of outdated IT systems or staff untrained on SEPA rules. Italy's Antitrust Authority, the AGCM, has issued fines to operators found to be engaging in IBAN discrimination. Despite these enforcement actions, the prevalence of cases suggests that deterrence remains insufficient.
Enforcement Gaps and Why the Problem Persists
The persistence of IBAN discrimination more than a decade after the SEPA Regulation took effect reflects a structural enforcement gap that varies significantly across member states. Minimum fines for IBAN discrimination range from as low as EUR 250 in some jurisdictions to EUR 10,000 in others, with maximum penalties ranging from EUR 3,500 to EUR 10 million or up to 10% of annual turnover for companies. This enormous variance in penalty levels across member states creates an uneven deterrence landscape where the same conduct carries very different legal risk depending on the country in which the infringement occurs.
The SEPA Regulation is also not currently incorporated into the EU's coordinated consumer law enforcement framework, which limits the ability of national authorities to cooperate on cross-border complaints. In some countries, consumers can face more than 70 different competent authorities to whom they could direct a complaint, a complexity that actively discourages reporting. ECC-Net has called on EU institutions and national governments for stronger, more consistent, and dissuasive enforcement of existing legislation, noting that available tools including instant payments and payee verification remove any technical justification for refusing foreign IBANs.
PSD3 and Future Regulatory Changes
The Payment Services Directive 3, which entered the EU legislative process in 2023 and is expected to come into force progressively from 2026, is anticipated to address several of the enforcement weaknesses that have allowed IBAN discrimination to persist. PSD3 is expected to introduce clearer consumer rights regarding payment acceptance, making it easier for both individuals and businesses to challenge IBAN discrimination and requiring national regulators to take faster action when complaints are filed. The directive is also expected to push for improved payment infrastructure and interoperability, ensuring SEPA payments are processed seamlessly regardless of IBAN country of origin. Greater accountability for payment service providers under PSD3 is expected to make it structurally harder for banks and payment providers to block or delay transactions from non-domestic IBANs.
What to Do If Your IBAN Is Rejected
If a business, employer, or public authority rejects your IBAN on the basis of its country prefix, the appropriate response follows a defined sequence. First, inform the refusing party in writing that they are legally obligated under Article 9 of Regulation (EU) No. 260/2012 to accept any valid SEPA IBAN for credit transfers and direct debits, regardless of its country of origin. Second, if the written notification does not produce resolution, submit a formal complaint to the refusing entity and request a written response. Third, if the response is unsatisfactory or absent, report the violation to the competent national authority in the country where the discrimination occurred. This is typically the financial regulator or consumer protection authority, depending on whether the infringer is a payment service provider or a commercial entity. The Accept My IBAN initiative at acceptmyiban.org provides a structured reporting channel that routes complaints to the appropriate authority.
The Rise of Virtual IBANs as a Workaround
One commercial response to IBAN discrimination that has gained traction is the issuance of virtual IBANs by neobanks. A virtual IBAN is an IBAN that appears to belong to a domestic bank account in the destination country but routes payments through to an underlying account held elsewhere. Some digital banks issue virtual IBANs with local country prefixes to their customers to reduce the friction of discrimination, allowing a French resident to present an FR-prefixed virtual IBAN while their actual funds are held in an account registered in another jurisdiction.
While virtual IBANs resolve the immediate friction of discrimination for the customer, the European Banking Authority has identified them as creating risks related to money laundering, consumer protection, deposit protection, and regulatory passporting. BEUC has explicitly stated that virtual IBANs cannot be considered an adequate solution because they make fraud prevention and resolution more difficult and create confusion for consumers about their legal protections including refund rights and deposit insurance coverage. The appropriate solution, according to ECC-Net, EU regulators, and consumer organisations, is enforcement of the existing legal framework rather than workarounds that introduce their own compliance and consumer protection complications.
Frequently Asked Questions
What is IBAN discrimination and is it illegal?
IBAN discrimination is the refusal by a business, employer, or public authority to accept a valid IBAN from an EU or EEA country solely because it carries a country prefix different from the one they expect. It is explicitly prohibited by Article 9 of EU Regulation 260/2012, which requires all SEPA IBANs to be accepted for credit transfers and direct debits regardless of their country of origin. IBAN discrimination is illegal throughout the EU and EEA, and affected consumers have the right to file complaints with national enforcement authorities.
Why are digital bank customers particularly affected by IBAN discrimination?
Digital bank customers are disproportionately affected because the IBANs issued by neobanks and fintech platforms frequently carry country prefixes that differ from the customer's country of residence. Revolut issues Lithuanian IBANs to customers across Europe, Wise issues Belgian IBANs to some EU customers, and Monzo issues UK IBANs. When these customers present their IBANs to domestic businesses or employers, the non-local country prefix may trigger unjustified rejection by systems configured to accept only domestic IBANs or by staff unfamiliar with SEPA rules.
How many IBAN discrimination complaints have been filed in the EU?
The Accept My IBAN initiative, led by Wise, received 4,688 consumer complaints between 2021 and early 2025. The majority of complainants were based in France (22%), Germany (19%), Spain (15%), and Italy (11%). The European Consumer Centres Network also receives regular reports of IBAN discrimination from consumers blocked from making payments for essential services including insurance, utilities, school fees, and transport subscriptions. Germany's Wettbewerbszentrale reported a 30% increase in IBAN discrimination complaints in 2024.
What should I do if a company refuses my IBAN?
First, inform the refusing party in writing that Article 9 of EU Regulation 260/2012 requires them to accept any valid SEPA IBAN. If this is not resolved, file a formal complaint with the company and request a written response. If the complaint is unresolved, report the violation to the competent national authority in the country where the discrimination occurred, which may be the financial regulator, consumer protection authority, or competition authority depending on who the infringing party is. The Accept My IBAN platform at acceptmyiban.org provides a structured reporting channel.
Will PSD3 solve the IBAN discrimination problem?
PSD3 is expected to strengthen enforcement mechanisms, introduce clearer consumer rights regarding payment acceptance, and push for improved payment infrastructure interoperability across SEPA. While these changes should reduce the prevalence and persistence of IBAN discrimination over time, PSD3 does not replace the existing legal prohibition, which is already clear and directly applicable. The core issue is enforcement of existing law rather than the absence of legal prohibition. PSD3's contribution will be to create stronger, more uniform enforcement tools across member states.
