Lorraine Williamson
If your Spanish bank has asked you—again—for your passport, NIE, address proof, or “tax residency” details, it usually isn’t personal. It’s compliance. Spain’s anti-money laundering rules require banks and other “obliged entities” to know who their customers are, keep records up to date, and apply extra checks when risk changes.
That can feel intrusive, especially when you’ve held the same account for years. But the system is designed to be refreshed. New products, big changes in account activity, a new phone number, or a dormant account becoming active can all trigger a review.
Why this is cropping up more as 2026 begins
There’s a second reason these requests are landing at the same time as New Year admin: more financial data is being standardised and reported to Spain’s tax authorities under updated “obligations informativas” rules. In 2026, banks and payment entities must provide expanded information in several areas, including some card activity thresholds and certain payment-system reporting.
This does not mean “Hacienda is watching every purchase”. It means institutions are feeding structured totals and identifiers into formal reporting channels, and they need customer files to be accurate when they do. The official tax guidance sets out the scope and thresholds, including the €25,000 annual card-operations exclusion rule for lower-activity cards.
The big misconception: “They only ask if you’re in trouble”
SEPBLAC—the authority behind Spain’s anti-money laundering supervision—addresses this directly in its public guidance: the obligation to identify clients under AML rules supports banks asking for documentation.
In other words, being asked for an update is normal. It happens to salaried workers, pensioners, autónomos, and students. It can be as routine as confirming your current address, especially if post has bounced or your account details don’t match newer systems.
What banks typically ask for, and what they’re trying to confirm
Most requests fall into three buckets: identity, address, and economic profile. Identity is your passport/DNI plus NIE details. Address is often a padrón certificate, a utility bill, or a bank-approved equivalent. Economic profile can mean “source of funds” questions—particularly if you’re receiving international transfers, running a business, or your activity has changed.
This is standard “diligencia debida” language. The legal framework expects entities to understand who they’re dealing with and the nature of the relationship.
How to respond safely (and avoid the scams that piggyback these checks)
Treat any request that arrives by SMS or email with caution. The safest method is simple: don’t click the link. Instead, open your bank’s official app, log in the way you normally do, and look for messages there—or call using the number printed on your debit card or the bank’s official website.
If the bank asks you to upload documents, do it inside the app or in-branch. If someone asks for your full PIN, card security code, or to “confirm” a login code you didn’t initiate, stop. That’s not a compliance check; that’s a scam attempt.
A practical tip for autónomos
If you’re self-employed and mixing personal and business flows in one account, 2026 is a good moment to separate them. It makes bank queries simpler, it makes tax admin cleaner, and it reduces the back-and-forth when institutions ask what a payment relates to. The expanded reporting framework is primarily about business/professional collection systems and higher-risk patterns, so clarity helps.
The bottom line
Spain´s bank ID checks are becoming a normal part of modern banking here: not dramatic, but persistent. The best outcome is boring. Keep your address current, keep your phone number stable, and use only official channels when documents are requested.
Sources: