How to issue Italian IBANs

Italian IBANs are routed through Banca d’Italia and validated against both the IBAN Modulus-97 check and the legacy CIN check letter — get either wrong and the account looks valid but bounces at the counterparty. The format carries an ABI bank code, a CAB branch code and a CIN national check character on top of the standard structure. Companion to the Dutch, Spanish and French IBAN pieces, this one walks through the Italian-specific layers, the Banca d’Italia registration, SEPA scheme adherence under the Instant Payments Regulation, clearing access and the reporting catalogue that switches on at first issuance — with worked examples showing where firms trip.

1. The Italian IBAN format

The Italian IBAN follows the ISO 13616 pattern IT2!n1!a5!n5!n12!c — 27 characters total:

• Positions 1–2: country code, always IT
• Positions 3–4: two IBAN check digits, calculated by Modulus 97 under ISO/IEC 7064
• Position 5: CIN national check letter (A–Z) — computed under a defined algorithm against the ABI, CAB and account-number components
• Positions 6–10: ABI — five-digit bank code identifying the credit institution, IMEL or IP, assigned by Banca d’Italia
• Positions 11–15: CAB — five-digit branch / agency code (Codice di Avviamento Bancario)
• Positions 16–27: twelve-character account number (numeric or alphanumeric) allocated by the PSP

The block from position 5 to the end — CIN + ABI + CAB + account number — is the legacy BBAN (Basic Bank Account Number), the domestic “coordinate bancarie” that pre-date SEPA and still anchor many Italian documents. Every Italian IBAN must pass both the outer IBAN Modulus-97 check and the inner CIN check letter. Generators that validate only the ISO check produce IBANs that look valid but get rejected by Italian counterparties.

All four carry the same outer IBAN Modulus-97 check; the difference is the national overlay inside the BBAN. Italy and France both run a domestic check character on top, computed differently, so a generator built for one is not portable to the other without reworking the national check.

2. How the CIN check letter actually works

The CIN is not a second Modulus-97 digit — it is a distinct Italian algorithm. Each character of the BBAN body (the ABI + CAB + account number, 22 characters) is weighted differently depending on whether it sits in an odd or an even position, using two published conversion tables (one for odd positions, one for even). The weighted values are summed, the total is taken modulo 26, and the remainder maps to a letter A–Z. Because odd and even positions use different tables, a transposition error — two digits swapped — changes the CIN, which is exactly what the check is designed to catch. A conformant Italian IBAN generator implements this table-driven computation in full; approximating it, or copying the IBAN Modulus-97 logic, yields IBANs that fail domestic validation even though they pass the ISO check.

3. Getting the ABI and CAB codes

The five-digit ABI is the institution identifier under which Banca d’Italia recognises an Italian PSP; it is assigned during the authorisation process. The CAB identifies the specific branch or agency. Together they form the coordinate-bancarie structure that still routes many domestic flows. For a passporting institution establishing a branch in Italy, an ABI / CAB is assigned at the branch notification. The ABI is finite and firm-specific: it is the anchor for every IBAN you will ever issue, so it is allocated once and guarded — a change of ABI means re-issuing the entire customer base’s IBANs.

4. The BIC connection

Italy’s ABI maps to a SWIFT BIC under ISO 9362. Every authorised Italian PSP has a BIC for SEPA and SWIFT-routed payments, and the BIC4 (first four letters) appears in cross-border counterparty checks. Apply for the BIC alongside the Banca d’Italia authorisation — do not wait for grant, or the payments build stalls at the point where SEPA adherence needs a live BIC.

5. SEPA scheme adherence and the Instant Payments Regulation

Adherence to at least one European Payments Council scheme is the precondition for reachability:

• SCT — SEPA Credit Transfer, the baseline, required for receiving credit transfers
• SCT Inst — instant transfers, now driven by hard deadlines (see below)
• SDD Core — direct debit, optional but widely used in Italy, with Italian overlays on mandate handling

Because Italy is in the euro area, Regulation (EU) 2024/886 (the Instant Payments Regulation) sets binding dates: a euro-area PSP that already offers credit transfers had to be able to receive instant credit transfers by 9 January 2025 and to send them by 9 October 2025. From 9 October 2025 the same PSPs must also offer verification of payee, and the charge for an instant transfer may not exceed the charge for an equivalent ordinary transfer. For a new Italian PSP, SCT Inst is therefore not an optional upgrade — it is table stakes from day one.

6. Clearing access in Italy

Italian PSPs settle euro payments through the Eurosystem rails: TARGET services for large-value and instant settlement (including the instant-payment settlement service), and the clearing-and-settlement mechanisms interconnected with them for retail batches. Direct participation requires settlement-account access at Banca d’Italia. Indirect participation via a sponsor bank is the common route for smaller PSPs — the PSP reaches the schemes through the sponsor’s settlement account rather than opening its own. The choice between direct and indirect access is an early architectural decision because it drives cost, operational control and the reconciliation model.

7. Worked example — a generator that passes ISO but fails CIN

Facts: an EMI passporting into Italy reuses the IBAN generator it built for Spain, adapting it to the 27-character Italian length. The generator computes the Modulus-97 check digits correctly. Test IBANs validate fine in the firm’s own tooling, so the team ships. Live payments to those accounts start bouncing from Italian banks with a “coordinate errate” rejection.

What the rule says: a valid Italian IBAN must satisfy the CIN check at position 5, computed from the odd/even weighting tables over the BBAN body — a check the Spanish generator never implemented, because Spain has no CIN. The Modulus-97 pass is necessary but not sufficient.

What the practitioner does: adds the table-driven CIN computation to the generator, re-validates the already-issued range (any IBAN with a wrong CIN must be re-issued, not patched in place, because the CIN is part of the identifier), and adds a domestic-validation test that checks CIN as well as Modulus-97 to the release pipeline. The lesson: an IBAN generator is country-specific below the ISO layer.

8. Worked example — building the range at branch notification

Facts: a payment institution authorised elsewhere in the EU sets up an Italian branch to issue local IBANs to Italian merchants. It wants IBANs live on the day the branch opens.

What the rule says: the ABI and CAB are assigned in connection with the branch notification and Banca d’Italia recognition — they are not something the firm self-allocates. SEPA reachability then needs a live BIC and scheme adherence, and, as a euro-area PSP, SCT Inst capability under the Instant Payments Regulation.

What the practitioner does: sequences the build backwards from go-live — ABI/CAB at branch notification, BIC application in parallel, SCT and SCT Inst adherence and clearing access (direct or sponsored) before the first IBAN, and the CIN-aware generator tested against domestic validation. It maps the post-go-live reporting catalogue (§9) before issuing, because the first live IBAN switches those obligations on.

9. What switches on at first IBAN issued

• Banca d’Italia Segnalazioni — the Matrice dei Conti supervisory returns
• UIF AML reporting and the AUA (Archivio Unico Antiriciclaggio) daily archive
• CESOP reporting where cross-border payment thresholds are met
• Instant Payments Regulation statistical and verification-of-payee obligations
• Conduct returns under the ABF framework

10. Internal IBAN-generator rules

• Modulus-97 check at the IBAN level (ISO/IEC 7064)
• CIN check letter computed on ABI + CAB + account number under the odd/even table algorithm — not a copy of the Modulus-97 logic
• Branch / agency code allocation — pick a structured scheme; Banca d’Italia looks at the structure at inspection
• Account-number policy — avoid sequential, guessable ranges; use a scheme that resists enumeration
• Avoid IBANs colliding with well-known public-sector accounts — Agenzia delle Entrate, INPS — to prevent payment misdirection

11. Passporting in vs. domestic licence

An IMEL or IP authorised elsewhere in the EU can issue Italian IBANs after establishing a branch in Italy or, in defined cases, on a Freedom of Services basis — but issuing an IT-prefixed IBAN in practice needs the ABI/CAB and the clearing reachability that a branch presence secures cleanly. See our branch vs Freedom of Services piece for the establishment choice, and the Italian EMI licence piece for the domestic-authorisation route.

12. FAQ

13. What to do, today

• Confirm whether your Banca d’Italia route is direct authorisation, branch passport-in, or Freedom of Services with Italian-IBAN issuance.
• Apply for the BIC alongside the Banca d’Italia file — it is a dependency for SEPA adherence.
• Implement both the Modulus-97 and the table-driven CIN check in your generator, and test against domestic validation, not just the ISO check.
• Adhere to SCT and SCT Inst from the outset — the Instant Payments Regulation dates have already passed for euro-area PSPs.
• Decide direct vs sponsored clearing participation, and map the post-go-live reporting catalogue before the first IBAN.

Related: Dutch IBANs · Spanish IBANs · French IBANs · EMI licence in Italy