Открытый банкинг

What is Открытый банкинг (Open Banking)?

Open banking is an approach to financial data in which a bank opens access to account and transaction information through standardized APIs. Access is granted not by bypassing the bank, but on the basis of the client's explicit consent, which can be revoked.

## How it works

The client gives consent to a specific provider (aggregator, fintech service, payment service) to read data or initiate a payment. The provider receives an access token with a limited validity period and a defined set of permissions, rather than the client's online banking login and password. Login and confirmation of transactions go through strong customer authentication (SCA).

## Where it applies

In the European Union, the base rules are set by PSD2. In the United Kingdom, the framework is its own Open Banking programme with mandatory API standards. Typical use cases include income and affordability checks when issuing loans, account aggregation in a single app, paying directly from a bank account without a card, and checks for KYC and anti-fraud purposes.

## Impact on high-risk verticals

For payment services and fintech, open banking reduces dependence on card schemes and some chargeback risk, but it also raises requirements for consent management, data storage, and AML compliance. Banks and regulators often tighten provider due diligence for businesses operating in grey or high-risk categories.

## Common mistakes

Confusing open banking with collecting client credentials (screen scraping), which is prohibited or restricted in many jurisdictions. Underestimating the consent validity period and the need to re-obtain consent. Overlooking differences between countries: the API set, timelines, and access conditions vary significantly.