IBAN discrimination: the rule most companies still break

The single euro payments area was built on a simple proposition: a euro credit transfer or direct debit between two accounts in the area should work the same way regardless of which country each account is in. The plumbing for that was delivered years ago. The behaviour of the companies sitting on top of the plumbing has lagged, and it lags in one particular way — the payment form that accepts an IBAN only if it begins with the local country code.

What the rule says

Regulation (EU) No 260/2012 establishes the technical and business requirements for credit transfers and direct debits in euro. Its ninth article deals with what the regulation calls payment accessibility, and it works in both directions. A payer making a credit transfer to a payee holding an account in the area may not be required to use an account in a particular member state. A payee accepting a direct debit from a payer whose account is in the area may not require the account to be in a particular member state.

The practical translation is short. If a company accepts euro direct debits at all, it must accept them from any euro account in the area. If it takes euro credit transfers, it cannot insist that yours come from a domestic account. Whether its billing software was built that way is not a defence, and neither is the risk-management explanation that is usually offered.

What is not covered

The rule is about the location of the account, not about everything else a company may want. It does not oblige anybody to accept a currency other than euro, it does not reach transfers involving accounts outside the area, and it does not prevent a company from carrying out the identity and anti-money- laundering checks it is separately required to perform. A company that asks for documents is doing something different from a company whose form rejects the IBAN format.

Nor does it require a company to offer direct debit at all. The obligation is conditional: it bites on whoever has chosen to accept that instrument. A business that takes only card payments is outside the article entirely, which is part of why the refusals cluster in sectors billing by direct debit — utilities, insurers, subscriptions, local taxes.

How a complaint actually works

1. Keep the evidence. A screenshot of the rejected IBAN, or the written refusal, with the date. Verbal refusals evaporate.
2. Put the article to the company in writing. Name Regulation (EU) No 260/2012 and its payment accessibility provision, state the account is a euro account held in the area, and ask for the refusal to be reconsidered. A surprising share of cases end here, because the first-line agent did not know.
3. Escalate to the competent authority. Each member state designates authorities responsible for compliance with this regulation and a body for out-of-court redress; those are published, and the complaint goes to the authority of the country where the company is established.
4. Say which outcome you want — the payment accepted, not compensation. Supervisory complaints are about compliance, and a complaint framed as a consumer dispute travels more slowly.

Why it persists

The honest answer is that the cost of non-compliance is low and diffuse. The company inconveniences a minority of customers, most of whom work around it by opening a local account, and the ones who complain are handled individually. The regulation created a right without creating an automatic penalty, and rights without penalties decay into procedures.

That is worth knowing before writing the letter, because it sets the expectation correctly. The article is real, the authority is real, and the complaint is usually effective for the person who makes it. It has not been effective at changing the forms, and nothing in the text of the regulation was ever going to do that on its own.