IBAN Validator: Bulk Check & Bank Lookup

What does IBAN Validator do?

IBAN Validator checks up to 10,000 IBANs in one run, offline and in seconds, and adds the bank name and BIC for German, Austrian, Swiss and Liechtenstein IBANs. For every IBAN you get:

• ✅ valid / invalid with the first check that failed: country and length per the SWIFT IBAN Registry, the BBAN structure, the mod-97 check digits, and the national check digits for Belgium, France, Spain, Italy and the Netherlands
• 🖨️ the IBAN in electronic (DE89370400440532013000) and printed (DE89 3704 0044 0532 0130 00) format
• 🏦 bank code, branch code and account number as the registry defines them, and for DE, AT, CH and LI the bank name and BIC from official open bank-code files (source, licence and validity date on every row)
• 🧪 a test / example IBAN flag: the IBANs printed in the IBAN Registry, IBANs used in public payment documentation and placeholder-looking accounts are marked, so nobody pays to them
• 🌍 a SEPA flag: usesIbanOutsideSepa: true for countries that use IBAN but are not in SEPA (Turkey, Saudi Arabia, Brazil, Israel, Ukraine …), where euro SEPA transfers do not work

Paste IBANs as they come: lower case, with spaces, dots or dashes, or as a comma- or semicolon-separated list.

Who is it for?

• Finance and accounts payable teams that check supplier and employee IBANs before a payment run (typos are caught before the bank rejects the file).
• Marketplaces, SaaS and fintechs that need to validate IBANs at onboarding or in bulk, and want the bank name and BIC for display.
• Data and CRM cleanup: find typos and test IBANs in a customer or supplier list.
• Developers who want a reference implementation of the offline IBAN rules with the registry data behind it.

How the check works

1. Country and length. The first two letters must be an IBAN country in the SWIFT IBAN Registry and the length must match (DE = 22 characters, NO = 15, MT = 31 …).
2. Structure. The part after the check digits must have the structure of the country (digits where digits are required, capital letters where letters are required).
3. Mod-97. The ISO 7064 check digits (positions 3–4) must match.
4. National check digits where the algorithm is public and the same for every bank: BE (mod 97), FR (RIB key), ES (two control digits), IT (CIN letter) and NL (11-test, for 9–10 digit account numbers; old giro numbers have no check). Germany is not checked: its Prüfziffer methods differ by bank (the Bundesbank publishes about 150 of them), so nationalCheck says not-applicable.
5. Bank lookup for IBANs that passed all checks: the bank code is looked up in a bundled file. Bank-code files are used only where the licence allows it:

Country	File	Licence / terms
DE Germany	Deutsche Bundesbank Bankleitzahlendatei	Free to store, pass on and copy for personal or business use if unaltered and credited "Quelle: Deutsche Bundesbank"
AT Austria	OeNB SEPA-Zahlungsverkehrsverzeichnis	CC BY 4.0, commercial use allowed (credit "© OeNB")
CH, LI Switzerland and Liechtenstein	SIX Swiss Bank Master	SIX: "Information in the Download Bank Master may be used freely"

For every other country there is no openly licensed bank-code file: the row returns the bank code as printed in the IBAN and says bankLookup: "not-available" with a note that the bank name is not available. The bank-code files are bundled with the Actor and refreshed by a script (npm run refresh-data in the Actor's folder); every row says which file it used and how old it is (bankSource, bankDataValidity).

How to use it

1. Click Start with the default input: eight example IBANs from the IBAN Registry and one with a bad checksum.
2. Replace the list with your own IBANs, one per line.
3. Turn Look up the bank off if you only need the checks.

The Results tab shows one row per IBAN; Bank lookup and Checks have their own tabs.

Input example

{
    "ibans": ["DE89 3704 0044 0532 0130 00", "DE75 5121 0800 1245 1261 99", "NL91 ABNA 0417 1643 00", "DE89 3704 0044 0532 0130 01"],
    "lookupBank": true
}

Output example

Real output of a local run on 1 October 2026 (bank data from the files downloaded the same day):

IBAN	valid	status	bank	BIC	test IBAN
DE89 3704 0044 0532 0130 00	true	valid	Commerzbank	COBADEFFXXX	true (registry example)
DE75 5121 0800 1245 1261 99	true	valid	Societe Generale	SOGEDEFFXXX	false
FR14 2004 1010 0505 0001 3M02 606	true	valid	not available for FR (bank code 20041)	–	true (registry example)
DE89 3704 0044 0532 0130 01	false	invalid-checksum	–	–	false

One row in full:

{
    "input": "DE75 5121 0800 1245 1261 99",
    "position": 9,
    "iban": "DE75512108001245126199",
    "ibanPrinted": "DE75 5121 0800 1245 1261 99",
    "countryCode": "DE",
    "countryName": "Germany",
    "valid": true,
    "status": "valid",
    "message": "Valid IBAN: country, length, structure and mod-97 check digits match.",
    "checkDigits": "75",
    "expectedLength": 22,
    "nationalCheck": "not-applicable",
    "bankCode": "51210800",
    "branchCode": null,
    "accountNumber": "1245126199",
    "bankLookup": "found",
    "bankName": "Societe Generale",
    "bic": "SOGEDEFFXXX",
    "bankSource": "Deutsche Bundesbank Bankleitzahlendatei (Quelle: Deutsche Bundesbank)",
    "bankDataValidity": "07.09.2026 to 06.12.2026",
    "bankNote": null,
    "isTestIban": false,
    "testReason": null,
    "inSepa": true,
    "usesIbanOutsideSepa": false,
    "error": null,
    "errorMessage": null
}

Fields worth knowing:

• status: valid, invalid-country, invalid-length, invalid-format, invalid-checksum or invalid-national-check. valid is true only for valid.
• bankLookup: found, not-found (the code is not in the file: closed or merged bank, or an example IBAN), not-available (no open file for the country), no-bank-code (the country's IBAN has none) or not-checked (lookup off, or the IBAN failed a check).
• error / errorMessage are set on free rows only: empty-input, not-an-iban, too-long, invalid-input, limit-reached.

How much does it cost?

This Actor uses pay per event:

Event	Price
IBAN checked (one row per IBAN-shaped entry, valid or invalid)	$0.001
Entries that cannot be read as an IBAN, and run-level notes	free

• 1,000 IBANs cost $1.00; the default run costs $0.009.
• No external service is called, so there are no other costs. Apify also charges a tiny standard start fee per run.
• Set Maximum cost per run in the run options and the Actor stops when it is reached.

Limitations

• A valid IBAN is not proof that the account exists, is open, or belongs to the person you expect. The checks catch typos and impossible numbers. The Actor does not contact any bank and cannot confirm the account holder (use your bank's Verification of Payee service for that).
• The country formats come from the SWIFT IBAN Registry, transcribed from open data sets; the registry changes now and then. Countries that only have a partial IBAN (for example Algeria, Morocco, Senegal) are not in the registry and are reported as invalid-country.
• National check digits only for BE, FR, ES, IT and NL. A few neobank accounts do not follow their country's national rule and fail the national check although the IBAN works: such rows say invalid-national-check and name the reason; check the IBAN with the bank if you doubt it.
• Bank names only for DE, AT, CH and LI (see the table above). The bank-code files are a snapshot that is as old as the Actor's last release; bankDataValidity shows the validity the publisher states. A bank that merged or changed its code recently may show not-found.
• Test IBAN detection is a list of known documentation IBANs plus placeholder patterns; an IBAN that is not flagged is not guaranteed to be real.
• 10,000 IBANs per run. Entries are de-duplicated after normalising.

Data and licences

The IBAN structure data is from the SWIFT IBAN Registry (the ISO 13616 registration authority). The bank-code files come from the Deutsche Bundesbank (Quelle: Deutsche Bundesbank), the Oesterreichische Nationalbank (© OeNB, CC BY 4.0) and SIX Interbank Clearing. Not affiliated with or endorsed by any of them. No personal data is processed beyond the IBANs you enter; the Actor stores nothing between runs.

FAQ

Does it call a bank or an API?

No. Everything runs offline in the Actor, using the registry table and the bundled bank-code files. That is why it is fast and cheap.

Why does a valid IBAN have no bank name?

Bank names come from open bank-code files, and only DE, AT, CH and LI have one that the licence allows to bundle. For other countries the row returns the bank code and says so. Many national bank registers exist but do not allow redistribution.

Why is an IBAN flagged as a test IBAN?

It is one of the example IBANs printed in the SWIFT IBAN Registry or in public bank and payment documentation, or its account number is a placeholder such as 0123456789. These look real and pass every check, but they are not someone's account.

More tools from the same developer

All pay-per-result, no proxy or login needed, built and maintained by the same developer:

Website audits

• Website Accessibility Checker: WCAG 2.2 & EAA: accessibility issues with fixes, SEO basics and security headers.
• Cookie & Tracker Audit: GDPR Consent Checker: cookies and tracking tags that load before consent.
• AI Crawler Access Checker: robots.txt & llms.txt: which AI crawlers a site allows, plus llms.txt.
• Structured Data Validator: Schema & Rich Results: JSON-LD and Microdata checked against Google's rich result rules.
• Website Change Monitor: Diffs, Prices & Alerts: get a row only when a page changes, with a clean diff.
• Policy Change Monitor: Privacy & Terms Tracker: privacy policy and terms changes, classified clause by clause.
• SaaS Pricing Monitor: Track Competitor Plans: competitor pricing plans as structured data, with price-change diffs.
• Sitemap Change Monitor: New & Removed URLs: new, removed and changed URLs from a site's sitemaps.
• Site SEO Crawler: Broken Links & On-Page Audit: site-wide crawl for broken links, redirects and on-page SEO issues.
• Website Tech Stack Detector: Bulk Lead Filters: technologies used by websites, with filters for lead lists.
• Domain Availability & Expiry Checker (RDAP): domain availability, registrar and expiry dates from RDAP.
• Status Page SLA Monitor: Uptime & Incidents: SaaS vendor uptime, incidents and a monthly SLA table from public status pages.

Company data and compliance

• Company Contact Finder: Emails, Phones & Socials: contact details published on company websites.
• UK New Companies Feed: Companies House Daily: newly incorporated UK companies with sector filters.
• EU VAT Number Validator: Bulk VIES Checker: bulk VAT checks with name, address and consultation number.
• LEI Corporate Tree: GLEIF Parents & Subsidiaries: LEI lookup with parents, subsidiaries and a KYC summary.
• UK Company Distress Watch: Insolvency Alerts: administrations, liquidations and winding-up petitions from The Gazette.
• Sanctions Screening: OFAC, EU, UN & UK Lists: names screened against official sanctions lists, with match scores.
• OSHA & EPA Violation Monitor: Fines by Company: US OSHA and EPA enforcement cases and penalties by company.
• Email List Precheck: Syntax, MX & Disposable Check: cheap email list hygiene before a real verification.
• UK Company Officer Changes: Director & PSC Alerts: director, owner, address and status changes for a watchlist of UK companies.
• FDA Warning Letters Monitor: By Company & Subject: FDA warning letters by company and subject, with cited regulations.
• Supplier Risk Report: Sanctions, VAT & Insolvency: one risk row per supplier from eight official registers, with changes since last run.
• Brand Impersonation Domain Monitor: Look-alikes: look-alike domains and certificates that imitate your brand, with a risk score.

Media and AI

• Audio & Video Transcriber: Podcasts, SRT, Speakers: audio, video, podcasts and social links to text, SRT and VTT.
• Podcast Mention Alerts: Brand Mentions by Second: where your brand is said in new podcast episodes, with the exact second.
• News Brand Mentions Monitor: New Articles Only: new news articles about your brand, people or topics.
• YouTube Channel Monitor: New Videos & Growth: new videos and view growth of the channels you watch.

Market signals

• US WARN Layoff Notices: 12 States Daily Feed: layoff and plant closure notices from official state sources.
• US Product Recalls Monitor: FDA & CPSC Feed: FDA and CPSC recalls in one feed, with severity.
• EU Tenders Feed: TED Public Procurement Alerts: EU public tenders from TED with CPV, country and value filters.
• Liquor License Openings: New Bars & Stores (US): new US liquor licences from official state open data.
• Clinical Trials Change Monitor: Status & Updates: status, enrollment and results changes on ClinicalTrials.gov studies.
• Career Site Jobs Monitor: ATS Jobs & New Roles: open roles from company career sites, with new and closed roles since the last run.
• App Reviews Monitor: App Store & Google Play: app reviews from both stores, only new ones in monitor mode.
• US Federal Contracts Feed: SAM.gov & USAspending: SAM.gov contract opportunities with the buyer's award history.
• Grants.gov Opportunities: US Federal Grants Feed: US federal grant opportunities by keyword, eligibility and agency.
• Federal Register Monitor: US Rules & Notices Feed: new US rules, proposed rules and notices by agency or topic.
• B2B Sales Trigger Feed: Hiring + Tech Leads: companies hiring for a role and using (or not using) a technology, with contacts.
• Local Business Leads: OpenStreetMap, No Website: local businesses by city and category, including those with no website.
• Solana Token Pair Monitor: New & Trending Pairs: new and trending Solana pairs with liquidity, volume and safety flags.

Feedback

Missing a country's national check digits or a bank-code file with an open licence? Open an issue on the Issues tab.