For over a decade, SEPA has let people across 36 countries send euros almost as easily as a domestic transfer. A freelancer in Lisbon pays a supplier in Helsinki; a family in Dublin sends money to Warsaw — all on the same simple IBAN system. But that system had a blind spot: it never checked whether the name you typed actually matched who was really on the other end. That’s now changing.
What’s Actually Changed
Identity check: None (IBAN only) → Name matched to IBAN
Fraud caught: After the transfer → Before the transfer
Mismatch handling: No warning shown → Warning before confirming
Recovery odds: Low, once sent → Higher — caught earlier
The shift looks small in the box above, but it closes one of the most exploited gaps in European banking — the gap between ‘the account exists’ and ‘the account belongs to the person you think it does.’
Why It Took This Long
SEPA was designed for speed and standardisation, not identity checks. An IBAN identifies an account, full stop — it says nothing about ownership. Fraudsters figured this out quickly: set up an account, send a convincing fake invoice or spoofed email, and the transfer goes through with no warning at all, regardless of whether the name entered matches reality.
This gap sits behind a large share of invoice fraud and so-called CEO fraud, where criminals impersonate a supplier or executive to redirect a legitimate payment. Because SEPA transfers move quickly and are hard to reverse, victims — from solo freelancers to large companies — have often had no way to get their money back once it was gone.
This safeguard — often referred to as verification of payee SEPA checking under the EU’s Instant Payments Regulation — required banks across the eurozone to build real-time name-matching into their core systems, a significant technical lift given the volume of instant transfers processed daily.
How the Fix Works, Step by Step
- You enter an IBAN and the recipient’s name to start a SEPA transfer.
- Your bank checks that name against the one registered to that IBAN.
- A full match lets the payment proceed with no extra friction.
- A partial or no match triggers a warning before you confirm.
- You choose to cancel, fix the details, or verify independently before proceeding.
For Businesses: What to Fix Now
Companies that send frequent SEPA payments gain a genuine layer of protection against invoice fraud — a mismatch gets caught before money leaves the account, not after. But it cuts both ways: businesses trading under a name different from their legal registered name may see their own incoming payments flagged. Many finance teams are using this rollout as a prompt to audit and align account names across every bank relationship they hold.
For Everyone Else: What to Actually Do
When your bank flags a mismatch, treat it as a genuine reason to pause — call the recipient directly rather than proceeding on faith. But don’t over-trust a match either: a close or partial match can still indicate a scam using a similar-sounding name. And if something does go wrong, report it to your bank immediately; faster action meaningfully improves the odds of recovering misdirected funds.
The bigger picture is simple: SEPA was always fast. Now it’s finally starting to be careful too — and for a payments system moving billions of euros a day, that combination was long overdue.
