Security at IWB

Protecting the funds and information entrusted to us is the most important part of our work. This page explains how IWB secures its platform and what you can do to keep your account safe.

How we protect your account

• All traffic between your browser and IWB is encrypted in transit.
• Passwords are stored using strong one-way hashing and are never visible to staff.
• Sessions end automatically after a period of inactivity.
• Administrative actions are recorded in an audit log reviewed by our risk team.
• Every transfer is screened against sanctions lists before it is released.
• Our platform is assessed each year by an independent security firm.

What you can do

• Use a unique password of at least 12 characters and do not share it.
• Sign out when you finish, especially on shared computers.
• Review your transactions and notifications regularly and report anything unfamiliar.
• Remove users from your organisation promptly when they change roles or leave.

Recognise fraud

IWB will never ask for your password, one-time codes or full credentials by email, telephone or message. Be cautious of urgent requests to change payment details for a supplier; confirm them by calling a number you already trust.

Report a concern

If you suspect unauthorised activity, change your password and call customer support on +41 22 555 0100. You can also contact us through the website.