Using Your Israeli Bank from Abroad: Logins, Codes and Held Transfers

In our check on 23 October 2026, the login pages of five major Israeli banks opened from abroad: Hapoalim, Leumi, Discount, Mizrahi-Tefahot and First International. But an open login page is not the same as a completed transaction. What causes trouble abroad is the one-time code, which goes to the phone number registered with the bank, and the bank's anti-fraud checks. Banks must watch for unusual activity, and a login from a foreign address, a new device or a data-center or VPN address can look unusual, so the bank may ask for extra verification or hold a transfer until you confirm it. Sort out the phone number before you leave. A static Israeli home IP, the same every time, can make your logins look the way they did from home; to receive SMS codes you will also need an Israeli phone number. Below: what can go wrong, when an Israeli IP helps, what to set up in advance and whom to call.

Why a bank may stop a login from abroad

Israeli banks protect accounts from fraud, and their systems look at how a login arrives. A new device, a foreign address or a data-center address can make it look unusual, and then the bank may react in different ways.

The login may go through, but the bank asks for a one-time code, locks the account or asks you to call. The code goes to the phone number registered with the bank, so it reaches you only if that number works abroad. The code goes to that number whatever connection you log in from: to receive SMS codes you will also need an Israeli phone number.

Closing the site to foreign traffic is rare and has been temporary: in January 2012, Discount and First International blocked access from abroad for a while after hacker attacks (Globes). It is not what we saw in October 2026, but such decisions are made without warning. You usually find out at the worst moment, with a payment due and your head already full, and end up trying one VPN after another in a hurry until one more or less works. It is calmer to set it up in advance and, when you need it, just press "Connect".

The real risk: a transfer held for verification

Getting in is the easy part. Moving money is where the checks get stricter, and where a problem costs more than a failed login.

Israeli banks are required to watch for it. The Bank of Israel's online banking directive requires every bank to run automatic, real-time monitoring for unusual activity, especially in high-risk actions, and to consider immediate steps such as suspending the transaction or asking the customer to confirm it (Bank of Israel, directive 367). Transfers and payments above the bank's first amount threshold, and changes to your phone number or other contact details, need at least two authentication factors. Many banks use a one-time code sent by SMS or voice message as one of them (Bank of Israel).

Banks' own terms say the same in plain words. Discount Bank's general account terms let it refuse or postpone an instruction if it doubts the instruction is genuine, or if carrying it out may expose the bank to risk (Discount, general terms, s. 23.6). Discount also warns that an instant digital transfer may not be allowed online because of its sensitivity, and then it can be made only at a branch or through Discount 360, its remote personal service (Discount).

From abroad, this is how it can play out. You send a payment or a transfer to a new payee, the bank's system finds it unusual and holds it until you confirm. The code goes to the Israeli number registered with the bank, the one you may have let lapse, and replacing that number is itself one of the actions that need two factors. If it ends in a phone call, it is a call to Israel across a time difference, while the payment waits and its deadline does not.

Banks don't publish which signals they score, so nothing guarantees that a transfer goes through without a check. What you control is the phone number: keep the number registered with the bank working abroad, or change it well before a large transfer.

When an Israeli home IP helps with your bank

Two of the signals above depend only on your connection: where the login comes from, and what kind of address it is.

• A foreign address. If you used to bank from home in Israel, a login from Canada or Germany is a change the bank's system can notice.
• A data-center or VPN address. Most VPNs exit from servers in data centers, and such addresses are more likely to be flagged than a home connection; see residential IP vs. a regular VPN.

A static IP from a range of Israeli residential addresses takes the first signal away and avoids the second: you log in from the same Israeli home-internet address every time, rather than a changing foreign or datacenter one. It isn't your old home address, and how a bank weighs that depends on rules we can't see. That can make extra checks less likely. It doesn't replace the device check or the second factor on a large transfer, and the bank can still ask you to verify or hold a payment; to receive SMS codes you will also need an Israeli phone number. Each bank applies its own rules, so the only way to know whether it makes a difference for you is to try. Test it with your own bank — 3 days free, no credit card required.

How the major banks handle login

In the same check, the login pages of Hapoalim, Leumi, Discount, Mizrahi-Tefahot and First International all opened normally from abroad; Mercantile was not part of that check. The same day the apps of all five banks, and Mercantile's, were listed in the US, Canadian, UK and German App Stores, so you don't need an Israeli store account. The app logs in to the same bank, so a login from a new phone can still trigger extra verification.

What to set up before you leave

1. Decide on the phone number. Either keep the number registered with the bank working abroad, on roaming and able to receive SMS and calls, or have the bank change it to a number you will keep. Do it while you are still in Israel: changing the number is itself an action that needs two authentication factors.
2. Log in once on the devices you will use abroad, so any new-device check happens while the codes still reach you.
3. Save the bank's numbers for customers abroad (below), and ask your branch how you would make a transfer that can't be done online, for example through Discount 360 at Discount.
4. Don't plan on relatives logging in for you. It means sharing passwords, which puts the account at risk.

If the account does get locked, call the bank or message your banker: it is slow across time zones, but only the bank can release it. If an Israeli site really doesn't open from abroad, which is not what we saw with the banks, see An Israeli website says "access denied".

Tips for Specific Banks

Bank Hapoalim

On the website you log in with your user code and password, or by scanning the code on the login page with the Hapoalim app. When you log in from a new device, the bank sends a one-time code by SMS or voice call to the number registered with it, so keep that number working abroad. Customers abroad can call +972-3-653-2620.

Bank Leumi

Leumi's login page opens normally from abroad. You can sign in with your username and password, or scan the QR code on the page with the Leumi app. One-time codes go to the phone number registered with the bank; to change that number, contact the bank.

Mizrahi-Tefahot

You log in with your username and password. If you forgot your password or got blocked, you can unblock yourself on the website, in the app or by phone; from abroad, call +972-76-804-8860 and choose to get the verification code by voice message, and the system will call you with it.