Hey Marco, great question—this is something I’ve walked through with a lot of users, since financial privacy jitters are totally understandable given how often we hear about scams these days. Let’s break this down into two clear parts:

First: Is the resistance to sharing IBANs reasonable? #

Short answer: It’s a mix of justified caution and sometimes overblown worry, depending on context and where you live.

In places like the EU, IBANs are inherently meant to be shared for incoming payments—you’ll pass yours to employers, friends splitting bills, or utility companies to get paid. That said, the widespread wariness isn’t random. There are real (if limited) risks tied to exposing your IBAN publicly, which leads straight to your second question.

What can someone actually do with your IBAN? #

Let’s split this into harmless, intended uses and potential malicious misuse:

Harmless, legitimate actions #

• Send you money: This is the whole point of an IBAN. Anyone with your IBAN can initiate an incoming transfer to your account—this is safe, and it’s why you share it in the first place.
• Verify account ownership: Some services might use your IBAN to confirm you hold the account (like setting up direct debits), but they’ll almost always need extra details (your full name, address) to follow through.

Potential malicious uses (the reason for caution) #

An IBAN alone can’t let someone drain your account, but it’s a key piece scammers can leverage:

• Convincing phishing scams: Scammers will use your IBAN to craft fake messages that feel personal—think "We spotted a suspicious transaction on IBAN [your number]—click here to secure your account." Seeing your own IBAN makes these scams way more believable, tricking people into sharing PINs, online banking passwords, or one-time codes.
• Social engineering: A scammer might pose as a bank rep, drop your IBAN to gain your trust, then pressure you into sharing more critical info or making a fraudulent transfer.
• Unauthorized direct debits (in some regions): In areas where direct debits only require an IBAN and account name, a bad actor could set up recurring payments. Most banks let you reverse these quickly if you catch them, but it’s still a hassle.
• Targeted spam/scam lists: Your IBAN (especially paired with your name) might get sold to fraud rings, leading to more frequent, targeted financial scams.

Bottom line #

Being careful about who you share your IBAN with is totally rational—don’t post it on social media, don’t send it to random people who message you asking for it. But sharing it with trusted parties (employers, family, verified service providers) is generally safe. The real danger happens when your IBAN is combined with other sensitive info (like your address, PIN, or banking login)—that’s when scammers can cause real harm.

内容的提问来源于stack exchange，提问作者Marco Altieri