Alert!
BIC Screening for Every Bank in Your Payment Chain
BIC screening checks the Bank Identifier Codes in a payment against sanctions data before the money moves. AML Watcher runs it inside Payment Screening and derives the BIC from the IBAN, so you never have to supply it yourself.
Use Cases
What Is a BIC Code?
A Bank Identifier Code (BIC) is the 8 or 11 character code that identifies a financial institution in international payments. Most people know it as the SWIFT code.
The international standard ISO 9362 defines it and now calls it the Business Identifier Code, because non-bank institutions can hold one too. Swift issues every BIC as the ISO registration authority.
A payment can pass on names alone and still route through a sanctioned bank. BIC screening checks the bank as well as the parties.
- Stands for
- Bank Identifier Code, formally Business Identifier Code
- Standard
- ISO 9362
- Issued by
- Swift, as ISO registration authority
- Length
- 8 characters, or 11 with a branch code
- Also called
- SWIFT code, SWIFT BIC
- Format
- AAAA BB CC DDD
Screening the Bank, Segment by Segment
BIC screening compares every BIC in a payment instruction with the BICs published on sanctions lists and watchlists. A match tells you a listed bank, or one of its branches, is sending, routing or receiving the funds.
Institution prefix
4 letters or digits. Identifies the institution. Bank mode catches every branch of a flagged bank.
Country code
2 letters from ISO 3166-1. Country mode flags any institution in a sanctioned or restricted country.
Suffix
2 letters or digits, formerly the location code. Location mode screens by city or region.
Branch code
Optional 3 characters. XXX or none means the primary office. Branch mode matches the exact branch.
Anatomy of an 11-character BIC under ISO 9362. Each segment has its own matching mode.
BIC vs IBAN: What Is the Difference?
A BIC identifies the bank. An International Bank Account Number (IBAN) identifies one account at that bank.
| BIC | IBAN | |
|---|---|---|
| Identifies | A financial institution and, optionally, a branch | A single account at an institution |
| Standard | ISO 9362 | ISO 13616 |
| Length | 8 or 11 characters | Up to 34 characters |
| Example | EXMPZZAB | ZZ02EXMP10203012345678 |
| Role in screening | Screened against sanctions data | Carries the bank identifier AML Watcher uses to derive the BIC |
Where BICs Appear in a Payment
One cross-border payment can name four or more banks. Swift ended the coexistence of MT and ISO 20022 formats for cross-border payment instructions on 22 November 2025.
| Bank in the chain | MT103 field | ISO 20022 pacs.008 |
|---|---|---|
| Sender and receiver of the message | Header blocks | Instructing and Instructed Agent |
| Payer’s bank | 52a Ordering Institution | Debtor Agent |
| Intermediary bank | 56a Intermediary Institution | Intermediary Agent |
| Beneficiary’s bank | 57a Account With Institution | Creditor Agent |
We Understand Your Challenges
Name Screening Alone Misses Sanctioned Banks
Name screening checks the people and companies in a payment. The banks between them need their own check, and the sanctions lists show why.
The Code Does Not Spell the Name
Swift assigns the prefix, and it often looks nothing like the legal name. A fictional Example Trade Bank could hold ZZ3P. Recent OFAC designations show the same pattern with real banks.
Lists Publish BICs in Different Formats
A single OFAC update in June 2026 listed one bank with an 8-character BIC and another with 11 characters ending in XXX. In 2018, OFAC corrected a listed bank’s BIC to remove spaces.
Payments Arrive With an IBAN, Not a BIC
Under the EU’s IBAN-only rule for euro payments, Regulation (EU) No 260/2012, the payer supplies an account number and no BIC. Unless the bank is derived from the IBAN, there is no bank code to screen.
Branches and Subsidiaries Carry Their Own Codes
A listed bank can surface under a branch code or through an affiliate with its own BIC. EU rules on financial messaging reach any Russia-established entity more than 50% owned by a listed bank.
Disconnected Does Not Mean Gone
Cutting a bank off from Swift does not remove it from payment chains. The European Commission confirmed that de-SWIFTed banks not under an asset freeze can still settle non-sanctioned trade through other channels.
Lists Move Faster Than Batch Files
OFAC added three entities with published BICs in a single update on 23 June 2026 and issued a wind-down license the same day. A screen that refreshes once a day runs on yesterday’s list.
One Bank, Five Ways to Write It
The same fictional bank as it can appear on lists and in payments. An exact string match catches only one of them.
| How the code appears | Where you see it | Exact string match | AML Watcher |
|---|---|---|---|
| QRTLZZ3P | List entry, 8 characters | Match | Match |
| QRTLZZ3PXXX | Payment, primary office | Miss | Match |
| QRTL ZZ 3P | Older list format with spaces | Miss | Match |
| qrtlzz3p | Payment keyed by hand | Miss | Match |
| QRTLZZ3P210 | Payment, branch office | Miss | Match |
Fictional codes for illustration. Format patterns drawn from OFAC SDN List updates (see Sources).
How It Works
From Payment Instruction to Decision in Four Steps
BIC screening sits inside Payment Screening, so the bank check and the party checks return together.
Receive
The payment reaches AML Watcher with a BIC, an IBAN or both.
Resolve
Missing BICs are derived from the IBAN. Every code is normalized to its institution root.
Screen
Every bank in the chain is checked against sanctions data from 215+ regimes, alongside the payer and payee.
Decide
Clear, review or block with your saved rules. Tune the match score, or use Exact Match. Logged for audit.
Capabilities
Precision
on Your Terms.
Screen as broadly or as precisely as your risk appetite requires. Define rules once, apply them across teams, and keep a full audit trail.
No BIC? Send the IBAN.
AML Watcher extracts the BIC from the IBAN, so your team never looks one up or leaves the field blank. It reads the country code and national bank identifier inside the IBAN and resolves them to the bank’s BIC before screening.
- Screens IBAN-only payments such as SEPA transfers
- No BIC field required in your payment data
- Supply the BIC directly for countries that do not use IBAN
Payment arrives with an IBAN
Fictional example IBAN.
Four Matching Modes.
A BIC identifies a bank, its country, its location and its branch. AML Watcher screens on any of them, so you set how broad or precise each rule is.
- Bank: every branch of a flagged bank
- Country: any restricted jurisdiction
- Location: screen by city or region
- Branch: the exact branch, zero tolerance
Choose how the BIC is matched
Fictional example code.
Tune the Match Score.
Dial coverage up or down to control false positives. Apply Exact Match where a sanctioned institution needs zero tolerance.
- Broader or tighter coverage, your call
- Fewer false positives to review
- Exact Match for zero-tolerance rules
Match score
Zero tolerance for sanctioned institutions
Illustrative example.
Reusable Configurations.
Define your screening rules once, name them, and apply them across teams and runs. BIC screening sits in the same Payment Configuration wizard as your other checks.
- Named rules, applied consistently
- One wizard for all payment checks
- Audit-ready by default
Payment Configuration
Applied across teams with a full audit trail
Fictional example configuration.
Dashboard and API.
Run checks interactively from the back-office dashboard, or automate screening inside your existing payment and transaction flows through the API.
- Analysts screen from the dashboard
- Engineers automate through the API
- Set up in minutes, no engineering
Two ways to run it
Activate with the self-service wizard
Before You Buy
Seven Questions to Ask Any BIC Screening Vendor
Use these in your next vendor evaluation. Most map to a gap described above.
| Question | Why it matters | AML Watcher |
|---|---|---|
| Can it screen a payment that has only an IBAN? | IBAN-only payments carry no BIC to screen | Yes. Derives the BIC from the IBAN |
| Does an 8-character BIC match an 11-character listing? | Lists and payments mix both lengths | Yes. Bank mode catches every branch. |
| Can compliance set it up without engineering? | Compliance should own its own rules | Yes. Live in minutes, self-service |
| Does it screen every bank in the chain? | The intermediary can be the listed party | Yes. Every bank in the chain. |
| How fresh is the sanctions data? | Designations can take effect the day they are published | Updated every 15 minutes |
| Does every alert explain itself? | Analysts need the list and the reason to decide | Match rationale on every alert |
| Can you set how broad or exact a match is? | Risk appetite varies by bank and country | Yes. Four modes, plus Exact Match |
Use Cases
Who Needs BIC Screening
Any business that sends, receives or routes money through banks it does not control.
Banks and Correspondent Banking
Cross-border wires and cover payments pass through banks you never onboarded. Screen each one before you release funds.
A listed intermediary in the routing chain
Payment Institutions and EMIs
Customers often send IBANs, not BICs. Derive and screen the beneficiary’s bank without adding a field to your checkout or payout flow.
A payout to an account at a listed bank
Money Transfer Operators
Remittance corridors rely on payout partners and their banks. Screen the bank on every corridor, not just the sender and receiver.
A corridor settling through a designated bank
Trade Finance
Letters of credit and collections name issuing, advising and confirming banks. Screen each bank named in the documents.
A listed issuing or confirming bank
Partner Bank and PSP Onboarding
Screen a prospective partner bank’s BIC during due diligence, before the relationship starts.
A listed institution before you onboard it
Crypto Exchanges and VASPs
Fiat withdrawals leave through the banking system. Screen the destination bank on every off-ramp alongside your crypto wallet screening.
A withdrawal to an IBAN at a listed bank
Screen the Bank, Not Just the Name.
See BIC / SWIFT Screening on your own payment data. It is live in AML Watcher today.
- Find right product and pricing for your business
- Get your current solution provider audited & minimise your changeover risk
- Gain expert insights with quick response time to your queries
FAQs
Frequently Asked Questions
What is BIC / SWIFT screening?
BIC / SWIFT screening checks the bank identifier code attached to a payment against sanctions and watchlist data. It flags sanctioned institutions, high-risk jurisdictions and risky correspondent banks before money moves.
How is BIC screening different from name screening?
Name screening checks the people and companies in a payment. BIC screening checks the banks that carry it. A sanctioned bank can appear under different codes, so an exact string match misses it. AML Watcher normalizes each code to its institution root before matching.
What are the four BIC matching modes?
Bank mode matches the institution prefix and catches every branch of a flagged bank. Country mode flags any institution in a sanctioned or restricted country. Location mode screens by city or region. Branch mode matches the exact branch. You can also tune the match score or use Exact Match.
Do I need engineering to set up BIC screening?
You can start without engineering by running BIC screening on your own data. Choose a matching mode, set your match score and save rules to clear, review or block. Every decision is logged for audit.