Verify Bank Account Numbers: IBAN, Transit and Account

Payment fraud targeting Canadian businesses is on the rise. The Canadian Anti-Fraud Centre reported $569 million in total fraud losses in 2023, with business email compromise (BEC) and payment redirection fraud accounting for a substantial share of business-targeted losses. Verifying bank account details before executing a payment is no longer optional. It is a core component of fraud prevention, supplier onboarding, and regulatory compliance across financial services, procurement, and accounts payable functions.

To validate a Canadian bank account number, verify the 3-digit institution number, the 5-digit transit (branch) number, and the 7- to 12-digit account number. For international payments, Canadian bank accounts are represented as IBANs or SWIFT/BIC codes. The Canadian Payments Association (Payments Canada) maintains the Financial Institutions File that maps transit numbers to active branches (Payments Canada). Format validation alone catches transcription errors but does not confirm the account exists or belongs to the expected party — full verification requires additional steps.

This guide covers the structure of Canadian bank account identifiers, verification methods available, the regulatory landscape, and practical steps to automate bank account validation in your workflows.

This article is provided for informational purposes and does not constitute legal advice.

Canadian Bank Account Identifiers

Canada uses a three-part identifier system for domestic payments. The institution number (3 digits) identifies the financial institution, the transit number (5 digits) identifies the branch, and the account number (7–12 digits) identifies the individual account. Together, they route payments through the Automated Clearing Settlement System (ACSS) operated by Payments Canada.

Canadian Bank Account Structure

For cheques and pre-authorised debits (PADs), the full routing number is the transit number followed by the institution number (e.g., 00016-003).

International Identifiers

For international wire transfers, Canadian banks use SWIFT/BIC codes rather than IBANs. Canada has not adopted the IBAN standard for domestic payments, though Canadian banks can receive IBAN-formatted transfers from countries that use the system.

IBAN Structures for Common Trading Partners

Canadian businesses frequently send and receive payments to/from international partners. Key IBAN formats:

Verification Methods for Canadian Bank Accounts

Transit Number Validation

The Financial Institutions File maintained by Payments Canada maps every active transit number to a specific branch of a specific institution. Validating the transit and institution number confirms that the routing information points to a real, active bank branch.

This check catches data entry errors but does not confirm that the account number is valid or that the account belongs to the expected party.

Pre-Authorised Debit (PAD) Verification

Under Payments Canada's Rule H1 — Pre-Authorised Debits, businesses initiating PADs must obtain a valid PAD agreement from the payor and verify the banking information provided. The agreement must include the payor's authorisation, the account details, and the terms of the debit.

Interac e-Transfer Verification

Interac e-Transfer is widely used for person-to-person and some business payments in Canada. While Interac provides a level of verification through the recipient's email or mobile number, it does not function as a formal bank account verification tool for onboarding or supplier payment purposes.

SWIFT Message Verification for International Payments

For international wire transfers, the originating bank verifies the SWIFT/BIC code of the receiving institution. However, SWIFT verification confirms only that the receiving bank exists and participates in the network — it does not verify the account holder's identity.

Bank Account Verification Methods Compared

Payment Fraud in Canada: The Regulatory Landscape

The Canadian Anti-Fraud Centre (CAFC) tracks fraud trends and provides public reporting. Business email compromise continues to be the primary vector for payment fraud targeting Canadian businesses. The RCMP and provincial law enforcement agencies are responsible for fraud investigation.

Payments Canada's rules for electronic funds transfers require originating financial institutions to verify the identity of the originator and maintain records. Under the PCMLTFA, reporting entities must verify client identity at account opening and monitor for suspicious transactions.

FINTRAC requires that financial institutions and money services businesses verify the identity of persons conducting electronic funds transfers of $1,000 or more (FINTRAC EFT Guidance). The Bank Act and PCMLTFA establish the broader framework for payment verification obligations.

Common Bank Account Fraud Patterns

Invoice Redirection Fraud

A fraudster intercepts or impersonates a legitimate supplier and sends updated bank details attached to a genuine-looking invoice. The paying company updates its records and sends the next payment to the fraudster's account. This is the most common form of payment fraud targeting Canadian businesses.

Account Takeover

The fraudster gains access to a legitimate business email account and sends payment instructions from a trusted address.

Mule Accounts

Fraudsters recruit individuals to open bank accounts in their own names, then use these accounts to receive fraudulent payments.

Practical Verification Workflow

Level 1: Format Validation

Validate the institution number and transit number against the Payments Canada Financial Institutions File. Validate the account number format. For international payments, validate the SWIFT/BIC code. This catches data entry errors.

Level 2: Account Existence Check

For Canadian domestic payments, verification through the originating bank's systems confirms the account exists and can receive payments. For international IBANs, dedicated API services query the correspondent banking network.

Level 3: Name Matching and Identity Verification

Cross-reference the account holder's name with corporate registry data, proof of address documentation, and existing supplier records. Supplement with identity verification and KYC checks for higher-risk transactions.

Automating Bank Account Verification

Manual verification of bank details does not scale. Automation addresses this gap by integrating bank account validation directly into accounts payable and onboarding workflows.

CheckFile's automated document verification platform extracts bank account details from invoices, cheques, and supplier documents, then validates them against format rules and bank registries in an average of 4.2 seconds (CheckFile platform data). Across 2.4 million documents verified, the platform achieves 98.7% OCR accuracy and reduces manual bank detail verification time by 83%.

Automated document validation systems extract transit numbers, institution numbers, and account numbers from invoices, contracts, and supplier registration forms. Any change in bank details for an existing supplier triggers an alert and a secondary confirmation workflow.

For a comprehensive overview, see our industry document verification guide. Our platform processes over 180,000 documents per month with a 94.8% fraud detection rate, delivering results in an average of 4.2 seconds.

Take action

CheckFile verifies 180,000 documents per month with 98.7% OCR accuracy. Test the platform with your own documents — results within 48h.

Request a free pilot

---

Frequently Asked Questions

Does validating a transit and institution number mean the account is legitimate?

No. Validating the transit and institution number confirms the routing information points to a real, active bank branch. It does not confirm the account exists, is active, or belongs to the expected party. A fraudster can provide valid routing information for an account they control.

Why doesn't Canada use IBANs?

Canada has not adopted the IBAN standard. Domestic payments use the transit number, institution number, and account number system, routed through Payments Canada's clearing and settlement systems. For international transfers, Canadian banks use SWIFT/BIC codes. There is no current regulatory initiative to adopt IBANs in Canada.

What should a business do when a supplier requests a change of bank details?

Never update bank details based solely on an email. Contact the supplier using a previously verified phone number (not a number provided in the change request). Verify the new bank details through your bank or a verification service. Require dual authorisation for any bank detail change. Document the verification. Report suspected fraud to the Canadian Anti-Fraud Centre (1-888-495-8501).

Are there any mandatory payee verification requirements in Canada?

Unlike the UK's Confirmation of Payee system, Canada does not currently have a mandatory payee name-matching service for domestic payments. Payments Canada and Interac have been exploring enhanced verification capabilities. In the meantime, businesses should implement their own verification procedures, including verbal confirmation of bank details and cross-referencing with corporate registry information.

What is the difference between transit number validation and bank account verification?

Transit number validation checks that the routing information is valid and points to an active bank branch. Bank account verification goes further by confirming the account exists, is active, and belongs to the declared party. Validation catches typos; verification catches fraud. Both are necessary for a secure payment process.