Cross-border payments need a four-step validator: strip whitespace, check length against country, run mod-97 for IBANs, and verify the 8 or 11 character SWIFT/BIC structure. Here is the exact recipe and the five traps that break it in production.