REGEXVAULTv2.0
Finance/Bank Identifiers
Verified Safe

IBAN (Generic, All Countries) Regex for Java

/^[A-Z]{2}[0-9]{2}[A-Z0-9]{4,30}$/

What this pattern does

This page provides a well-structured, multi-part regular expression for matching iban (generic, all countries), ported and verified for Java. Financial data validation has zero tolerance for false negatives — a missed invalid entry can corrupt downstream calculations. The snippet below is ready to drop into your Java project — whether you're validating in a Spring Boot controller, a Jakarta EE service, or a standalone utility class.

Java Implementation

Java
// IBAN (Generic, All Countries)
// ReDoS-safe | RegexVault — Finance > Bank Identifiers

import java.util.regex.Pattern;

public class IbanGenericAllCountriesValidator {
    private static final Pattern PATTERN =
        Pattern.compile("^[A-Z]{2}[0-9]{2}[A-Z0-9]{4,30}$");

    public static boolean validate(String input) {
        return PATTERN.matcher(input).matches();
    }

    // Example
    public static void main(String[] args) {
        System.out.println(validate("GB29NWBK60161331926819")); // true
    }
}

Test Cases

Matches (Valid)
Rejects (Invalid)
GB29NWBK60161331926819gb29NWBK60161331926819
DE89370400440532013000GB2NWBK60161331926819
FR7630006000011234567890189GBXX
NL91ABNA0417164300GB29 NWBK 6016 1331 9268 19
CH930076201162385295712GB29NWBK60161331926819

When to use this pattern

This pattern is drawn from the Finance > Bank Identifiers category and carries a ReDoS-safe certification. That matters for Java developers because critical in Java applications since the JVM regex engine uses backtracking and is susceptible to ReDoS without careful pattern design. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

Always verify check digits with MOD-97. A structurally valid IBAN can still be an invalid account. Use an IBAN validation library for payments.

Technical Notes

Structure: 2-char country code + 2 check digits + BBAN (Basic Bank Account Number, country-specific). The check digits are validated via MOD-97 algorithm — regex only validates format. Remove spaces before matching.

Have a pattern that belongs in the vault?

Submit it for review — community-verified patterns get credited to your GitHub handle. Free submissions join the queue. Priority review available for $15.

Submit a Pattern