Bank account verification is the process a business, bank or payment provider uses to confirm that a bank account is real, open and able to take the intended transaction, and often that it belongs to the expected person or company, before money is sent to it or pulled from it. It is also called account validation. Verification is a routine step when a customer links an account to an app, when a company adds a new supplier or employee to its payment run, and when a merchant sets up a debit.
Verification sits between simple format checks and full identity checks. Checking that an account number has the right length and check digits catches typos, but does not show the account is open. Confirming ownership, covered in more depth under account ownership verification, links the account to a named holder. Verification is a core part of KYC, payout operations and fraud controls.
Bank account verification in plain terms
Before you send a parcel to a new address, you might check three things: that the address exists, that someone lives there, and that it is the person you mean. Sending money is the same. A business wants to know the account is real, that it is not closed, and that it belongs to the right person, before the parcel, here the money, leaves.
If any check fails, it is cheaper to stop before sending. A payment to a closed account bounces back days later with fees; a payment to the wrong person can be very hard to recover.
Methods of verifying a bank account
- Format and directory checks. Software validates the structure of the sort code, routing number or IBAN and checks it against bank directories, as an IBAN checker does.
- Micro-deposits. The verifier sends one or two very small credits and asks the customer to confirm the amounts. It proves control of the account but takes a day or more.
- Open banking login. The customer signs in to their bank through an account information service, which returns account details and often the holder's name and balance in seconds. This is a common use of account aggregation.
- Penny drop and name enquiry. A small real-time credit, or a name lookup message, returns the registered account title. India's IMPS-based penny drop and Pakistan's account title fetch work this way.
- Payee name checks. The payer's bank asks the payee's bank whether the name matches, as in the UK's Confirmation of Payee and the EU's verification of payee.
- Database checks. Shared industry databases report whether an account is open and in good standing, based on contributions from participating banks.
Rules that require verification
Several rulebooks now make some form of verification mandatory, as of November 2026:
- United States, ACH. Nacha's rule on WEB debits, effective 19 March 2021 with enforcement from March 2022, requires originators of consumer debits authorised online to include account validation in their fraud screening the first time an account number is used. A separate micro-entries rule, phased in during 2022 and 2023, defines micro-deposits as ACH credits under $1 and requires commercially reasonable fraud detection for them.
- United Kingdom. Confirmation of Payee was introduced by the largest banks in 2020. Payment Systems Regulator Specific Direction 17 made it compulsory for a much wider group of payment providers, in groups with deadlines of 31 October 2023 and 31 October 2024; more than 320 organisations offered it by 2026; in 2026 the regulator consulted on removing the direction's expiry date.
- European Union. The Instant Payments Regulation requires payment providers to offer verification of payee on euro credit transfers from 9 October 2025.
What verification prevents
Account verification reduces several costs at once. It cuts returned payments and their fees in ACH and Direct Debit systems. It helps stop authorised push payment fraud and payment diversion fraud, where a criminal sends fake bank details by email. It makes it harder to use mule accounts and stolen identities, including synthetic identities, to receive funds. For companies, verifying supplier details is a key control in accounts payable, and for platforms making payouts it protects against paying the wrong person.
Limitations
No single method is perfect. Micro-deposits are slow and have themselves been abused to test stolen account details. Name checks produce "close match" results that customers often ignore, and they depend on how banks record names, especially for joint and business accounts; a beneficiary-account mismatch can be innocent. Open banking checks need the customer's bank to be connected. Verification also confirms an account at one moment, so firms re-check when details change. It is usually combined with other fraud prevention tools rather than used alone.