In the early days of eBay I exchanged money exclusively via bank transfer and had no worries, but for me the Internet has changed and these days I use PayPal to send and receive money from strangers. I see it like this: My email address is already public, so I'm not risking anything when I share it with strangers. My IBAN on the other hand is only known to a few respectable companies, so why change that? Seeing all the online platforms store all your PII without hesitation, but keeping your IBAN only as ****** and handing it straight to a trusted payment processor always reminds me that it's not like the others. Yes, I know businesses put their IBAN on their letter head, but they also have accountants watching their transactions.