An IBAN, or International Bank Account Number, is the standardized account identifier used to route bank transfers across countries and banking systems. It combines a country code, check digits, and account details in a format that reduces transfer errors and helps banks identify the destination account quickly.
In cyber security, IBANs matter because they are payment targets, not just reference numbers. Attackers often abuse exposed IBANs in invoice fraud, business email compromise, and account takeover schemes by changing payment instructions or creating fake beneficiary records. Defenders should treat IBAN creation and modification as sensitive actions, restrict who can add or approve them, and monitor for unusual changes. When companies use multiple IBANs for different projects or customers, clear ownership and reconciliation become essential to prevent confusion, fraud, and unauthorized rerouting of funds.