What’s holding open banking back?(sifted.eu)
sifted.eu
What’s holding open banking back?
https://sifted.eu/articles/open-banking-back-nordigen-api/
66 comments
In the EU you don't need to share your password
Does anywhere require you to share your password? That just seems... idiotic and contrary to all sense. I've certainly never had to, in fact my bank (like every other password-protected site) warns not to share passwords with anyone.
Yeah Plaid takes your password and stores it in plain text :|
That was how apps worked before Open Banking mandated API access, they would basically store your password and scrape your bank's web UI.
It seems you are not yet familiar with the insanity of "Sofortüberweisung"...
I'm in the US and have never needed to share a password.
Works fine in the UK, where all banks have to support open standards and you can use a third party app too analyse your transactions.
https://www.moneydashboard.com/ is the one I use, but there are others.
https://www.moneydashboard.com/ is the one I use, but there are others.
The data quality you get is absolutely terrible. For accounting/budgeting solutions where you have to map a single entity on your side with the transaction on the bank's side there's a ton of work that needs to be done in the background to fuzzy-match bank TXs (which can change retroactively, invalidating any unique match per descriptor or ID) to your own entity.
I guess I should be grateful that I got a year's worth of consulting $$$ thanks to the banks' incompetence but this should really be a solved problem especially in 2021. The regulator should mandate a spec and do frequent audits for compliance with said spec, and IDs (or other data) changing retroactively should be an immediate fail. The other problem is that there is no way that I know of to get test accounts, you have to use real accounts (with each bank) if you want to make sure.
I guess I should be grateful that I got a year's worth of consulting $$$ thanks to the banks' incompetence but this should really be a solved problem especially in 2021. The regulator should mandate a spec and do frequent audits for compliance with said spec, and IDs (or other data) changing retroactively should be an immediate fail. The other problem is that there is no way that I know of to get test accounts, you have to use real accounts (with each bank) if you want to make sure.
Taking off in Germany as well.
Slowly because the law does mandate an API but doesn't specify any technical details
Also because of a complicated authentication and registration system (with the regulator)
But the banks finally did something after they were ordered to do so. They were quite hesitant before because it weakens their control over the customers finances.
Also because of a complicated authentication and registration system (with the regulator)
But the banks finally did something after they were ordered to do so. They were quite hesitant before because it weakens their control over the customers finances.
I've noticed that a lot of the actual Bank apps now let you connect to other banks - so you can see everything in one app
(I guess to try and make you stay in HSBC app for instance, rather than going and opening Halifax and Monzo - although if they all offer it I don't see the need...)
My experience has greatly improved over the past few years. I use Monzo. I used to use Yolt to aggregate a couple of bank accounts and credit cards but Monzo offers that as part of their Monzo Plus accounts. It gives me a consolidated view of my spending.
I'm not really sure what else I'd want from Open Banking.
I'm not really sure what else I'd want from Open Banking.
Money Dashboard (and Yolt) allow you to categorise your spending. My own bank's app doesn't do that. So until it does...
This article is about the UK. It seems to be .. not as good as it could be.
This article seems to miss the main reason - because data sharing would be a threat to incumbents' market share, and so they obviously do not wish to partake.
Further, the incumbents are few in number, and have reg-capture via revolving doors.
Further, the incumbents are few in number, and have reg-capture via revolving doors.
Banks also don't want to make it any easier for customers to switch to other banks.
"No killer use case"
No, it's that the killer use case doesn't generate revenue for banks. Efficient transfer of money reduces a bunch of revenue streams (wire transfers, overdraft, late fees, check cashing...) without creating a new one. Banks would save costs, but it hurts their bottom line more.
We are unlikely to implement anything that helps poor people and reduces revenue for megacorps.
No, it's that the killer use case doesn't generate revenue for banks. Efficient transfer of money reduces a bunch of revenue streams (wire transfers, overdraft, late fees, check cashing...) without creating a new one. Banks would save costs, but it hurts their bottom line more.
We are unlikely to implement anything that helps poor people and reduces revenue for megacorps.
The EU example has shown that you can simply require banks to adopt customer-friendly interoperability and low fees.
If it’s possible in a union of 27 nations with originally very disparate banking systems, it’s certainly possible in America. There’s just no political will.
If it’s possible in a union of 27 nations with originally very disparate banking systems, it’s certainly possible in America. There’s just no political will.
There's no political will because it helps poor people and reduces revenue for megacorps. Guess who "political will" comes from?
> There's no political will because it helps poor people and reduces revenue for megacorps
There's no political will because of this fatalistic B.S. There have been multiple bills presented in Congress. The result is usually the same: lukewarm support.
(My favorite: a rep talking about cutting wire fees, making them 24/7 and mandating interoperability saying they got letters complaining because she talked about banking. Nobody wrote in support. Guess what got dropped from the bill.)
There's no political will because of this fatalistic B.S. There have been multiple bills presented in Congress. The result is usually the same: lukewarm support.
(My favorite: a rep talking about cutting wire fees, making them 24/7 and mandating interoperability saying they got letters complaining because she talked about banking. Nobody wrote in support. Guess what got dropped from the bill.)
Activism on these issues get stamped out by the wealthy. Look at what happened to Bernie and Occupy Wall Street.
It is not a matter of lack of passion or organization. It is a matter of corruption.
It is not a matter of lack of passion or organization. It is a matter of corruption.
> Look at what happened to Bernie and Occupy Wall Street
This is sort of like saying the wealthy have no power because look at John McAfee. Bernie didn’t propose bank interconnects. Occupy didn’t propose anything. (I was there.)
Payment infrastructure modernisation, by statute, simply doesn’t have political support in America. It’s between people who want to abolish banks and capitalism and an uncaring supermajority.
This is sort of like saying the wealthy have no power because look at John McAfee. Bernie didn’t propose bank interconnects. Occupy didn’t propose anything. (I was there.)
Payment infrastructure modernisation, by statute, simply doesn’t have political support in America. It’s between people who want to abolish banks and capitalism and an uncaring supermajority.
> The EU example has shown that you can simply require banks
Through regulation sure, but that wasn't the parent's point. Without regulation there is virtually no incentive for banks to play ball.
Through regulation sure, but that wasn't the parent's point. Without regulation there is virtually no incentive for banks to play ball.
And the political systems at play in most wealthy non-EU countries will lead to the banks essentially writing the regulation themselves. Ain't it fun?
[deleted]
Not convinced all about control. In the UK bank transfers are already free and easy to do through the online banking UI so the bank doesn't lose anything. I think it's more that the banks have no incentive to participate in this system and do the bare minimum they can get away with, but I doubt there is some "anti-open-banking" sentiment as opposed to just apathy.
The whole payments aspect of Open Banking seems like an attempt by VC-backed companies to become gatekeepers of bank transfers for no good reason nor benefit to the end customer. They are trying to solve a problem that's inherently not there (in the UK bank transfers are already super easy to do and settle immediately) but they pretend like there is one.
The whole payments aspect of Open Banking seems like an attempt by VC-backed companies to become gatekeepers of bank transfers for no good reason nor benefit to the end customer. They are trying to solve a problem that's inherently not there (in the UK bank transfers are already super easy to do and settle immediately) but they pretend like there is one.
It's a strange era where people can communicate and have access to immense amount of means (dev/machines) yet nothing has emerged yet.
Maybe there's some hidden complexity that banks solve and small open banking is not capable of yet. Maybe people just want to trust big corps and even if you provide similar services they won't flock to you as much ?
Maybe there's some hidden complexity that banks solve and small open banking is not capable of yet. Maybe people just want to trust big corps and even if you provide similar services they won't flock to you as much ?
Agreed. I'm guessing is the "we can be trusted" service that comes only with longevity and size, and a track record that shows ability to protect data and manage things in the customer's interest, which not many organizations have been able to maintain. Trust is earned by behavior over time, and easily lost.
More rambling: I am far from an expert on the current details, but I think that when it comes to taking care of one's savings, and the data closely tied to it, that can be used for identity theft, where we might perceive a worsening track record in institutions in general), trust is a big deal. Trust is given subconsciously sometimes, and ideally earned by things like: behavior over time (not promotions), and institutional size and inertia (why Wells Fargo still has customers, I guess), and/or observed behavior patterns relative to current events, proper staffing (competence, honesty, Golden Rule), and other indicators that suggest it is likely to remain so, to the extent of being a mental shorthand for "It's probably stupid (or not) to put my money there and let them take care of things that are really important to me".
Will Rogers I think said, and to varying degrees many have thought similarly, something like: "I'm more interested in the return of my money, than the return on my money." And data, now?
maybe there have always been more of people willing to manage others' money, than there is of confidence in trying someone new like a revolving door of trust without track record. And data closely tied to money -- same thing?
(various clarifying/fixing edits)
More rambling: I am far from an expert on the current details, but I think that when it comes to taking care of one's savings, and the data closely tied to it, that can be used for identity theft, where we might perceive a worsening track record in institutions in general), trust is a big deal. Trust is given subconsciously sometimes, and ideally earned by things like: behavior over time (not promotions), and institutional size and inertia (why Wells Fargo still has customers, I guess), and/or observed behavior patterns relative to current events, proper staffing (competence, honesty, Golden Rule), and other indicators that suggest it is likely to remain so, to the extent of being a mental shorthand for "It's probably stupid (or not) to put my money there and let them take care of things that are really important to me".
Will Rogers I think said, and to varying degrees many have thought similarly, something like: "I'm more interested in the return of my money, than the return on my money." And data, now?
maybe there have always been more of people willing to manage others' money, than there is of confidence in trying someone new like a revolving door of trust without track record. And data closely tied to money -- same thing?
(various clarifying/fixing edits)
Most banks are running on older core banking technologies that are overwhelmingly batch driven. Moving to real time transactions isn’t a minor shift for enterprises that have hundreds or thousands of applications, which would be a mix of in-house, COTS and SaaS solutions.
Certainly in the EU so far the "killer use case" for PSD2 things hasn't happened/it has not lived up to its hype. So beyond needing regulation to make things happen, there might also be a lack of use cases for most people.
Honestly, I like my current bank's app so much that I don't even really need or want some kind of quick money VC to get between me and my bank. Money transfers are done in seconds, almost every place allows me to use contactless payment from my bank app and there's no data being fed to Google or Apple. I wish I could use my checking account app to manage my savings account (on another bank) but I can live with the inconvenience of having a second, slightly inferior app thst I barely use anyway.
I think the answer to "what's holding banking back" is often "whatever the EU is doing with banking". The question often gets asked by people in countries where the biggest banks are terrible.
The problem is not the concept of banking, the centralization or overly broad government regulations. The problem is that some (big) banks don't give a fuck about their users' experience, especially when transferring money between different banks.
This is how PayPal got off the ground. Any of these billion dollar institutions could've built PayPal, or competed it to death when it started to become popular, but they chose not to.
I think the answer to "what's holding banking back" is often "whatever the EU is doing with banking". The question often gets asked by people in countries where the biggest banks are terrible.
The problem is not the concept of banking, the centralization or overly broad government regulations. The problem is that some (big) banks don't give a fuck about their users' experience, especially when transferring money between different banks.
This is how PayPal got off the ground. Any of these billion dollar institutions could've built PayPal, or competed it to death when it started to become popular, but they chose not to.
I mean, I feel like even the most basic execution of Open Banking (aggregated view of your money across all accounts) is a killer use case. People like to know how much money they have.
I use open banking regularly, the real killer feature I've found is the ability to view all of my accounts together in one place, and very easily move money between them. (Yolt did this for free, but it's shutting down. Other apps also have this feature.)
Yes, you could absolutely do this with each individual bank's app, but there's a little more friction there when you have to manually add the account number and sort code of your other account as a payee, etc. These payment apps made the process very simple without any extra cost.
One thing that I think will really turn people off open banking came up in a questionnaire one of my account's providers sent out. They wanted my opinion on using open banking as another set of data points for them to decide whether or not to approve applications for new accounts.
If it'll stop me needing to print out a years worth of bank statements to apply for a mortgage, great, but I don't think it's very far from a consumer thinking "open banking is the reason I was rejected for this account, why should I ever give anyone access to this."
Yes, you could absolutely do this with each individual bank's app, but there's a little more friction there when you have to manually add the account number and sort code of your other account as a payee, etc. These payment apps made the process very simple without any extra cost.
One thing that I think will really turn people off open banking came up in a questionnaire one of my account's providers sent out. They wanted my opinion on using open banking as another set of data points for them to decide whether or not to approve applications for new accounts.
If it'll stop me needing to print out a years worth of bank statements to apply for a mortgage, great, but I don't think it's very far from a consumer thinking "open banking is the reason I was rejected for this account, why should I ever give anyone access to this."
This is what cryptocurrency is: an IP layer for a new digital economy, with open banking by default.
I felt the pain of the banking industry’s stagnation recently. My grandparents asked me to take a check for them to the local bank branch to do an intra-bank account transfer. I thought to myself: “bank branch? no way, I’ll just log into the bank website and transfer between accounts”. To my dismay and surprise, I couldn’t even do that.
In the 21st century... Where supercomputers are in our pockets... I couldn’t transfer a couple thousand bucks between accounts without going to a bank branch. For the market dominant bank in PR. Had they had Bitcoin, I could’ve done this in seconds, without them leaving the house.
Oh, and don’t get me started on the embarrassment that is ACH. In 2021 I can’t send money without it taking days to settle.
The banking industry needs to step up with open protocols, interoperability and digital money. Hopefully DeFi lights this fire.
I felt the pain of the banking industry’s stagnation recently. My grandparents asked me to take a check for them to the local bank branch to do an intra-bank account transfer. I thought to myself: “bank branch? no way, I’ll just log into the bank website and transfer between accounts”. To my dismay and surprise, I couldn’t even do that.
In the 21st century... Where supercomputers are in our pockets... I couldn’t transfer a couple thousand bucks between accounts without going to a bank branch. For the market dominant bank in PR. Had they had Bitcoin, I could’ve done this in seconds, without them leaving the house.
Oh, and don’t get me started on the embarrassment that is ACH. In 2021 I can’t send money without it taking days to settle.
The banking industry needs to step up with open protocols, interoperability and digital money. Hopefully DeFi lights this fire.
In Europe, we can transfer money between any two bank accounts on any European country, and the transfer must complete in less than 90 seconds (from an account in bank A, in Spain to another account in bank B, in Italy, for example). And frequently those transfers are also free.
It's not a banking industry problem. It's an obsolete American banking industry problem.
It's not a banking industry problem. It's an obsolete American banking industry problem.
It’s a banking industry problem. The government shouldn’t have to step in: the "free market" should be able to innovate, just like DeFi is doing now out of necessity.
Innovation without revenue streams don't get funded by profit seeking organizations.
EU didn't innovate their way, it was regulated into place.
EU didn't innovate their way, it was regulated into place.
From an ISP of the early 2000s, free top-quality email hosting didn't have an obvious revenue stream, yet Gmail noted that it was possible and, later, almost certainly found a way to make it profitable.
The trick with an unsexy thing like low-cost bank transfers is finding a way to make it attractive to consumers at the time they select a bank.
The trick with an unsexy thing like low-cost bank transfers is finding a way to make it attractive to consumers at the time they select a bank.
Nobody picks a checking account based on how efficient bank transfers are. It's not that people don't care; of course they do. It's just not something that is advertised, or relevant to you until you run into it, and so is completely overshadowed by what IS advertised, and will affect you immediately (cost of the account, availability of funds once deposited, easy of deposit, etc).
> Nobody picks a checking account based on how efficient bank transfers are
Few people, not nobody. I picked my bank because they don't charge for incoming and outgoing wires. (Downside: no Zelle.)
Few people, not nobody. I picked my bank because they don't charge for incoming and outgoing wires. (Downside: no Zelle.)
In today's world I think people might be more sensitive about their banking data being collected and sold or used for advertising. Most people still don't seem to give e-mail that kind of consideration, but banking is on a different level.
Banks are already free to innovate. There are just no incentives for them to do so, especially if it supports small retail customers.
This very same symptom can be seen in US and Canadian ISPs: there is just not enough money in certain markets for them to compete against each other, and they don't, so the government should definitely step in.
This very same symptom can be seen in US and Canadian ISPs: there is just not enough money in certain markets for them to compete against each other, and they don't, so the government should definitely step in.
Yeah, it’s a market problem. We disagree on the solution but agree with the problem: there is no incentive to innovate.
Perhaps the government stepping in is better for the societal “greater good”, I’ll have to think about this and come to a personal conclusion.
Perhaps the government stepping in is better for the societal “greater good”, I’ll have to think about this and come to a personal conclusion.
> and the transfer must complete in less than 90 seconds […a]nd frequently those transfers are also free.
From what I hear in Germany, instant transfers always cost extra unless your bank account has a high fee. But that might just be us.
From what I hear in Germany, instant transfers always cost extra unless your bank account has a high fee. But that might just be us.
I have a different bank, but as you can see here, instant transfers are free for personal use: https://www.paysera.com/v2/en/blog/what-is-sepa
I have been reading about instant transfers and I think the banks don't have to pay for individual transfers, they pay a fee for being part of the SEPA system. If that is correct, then every cent you bank charges you for an instant transfer goes directly to their pockets.
I have been reading about instant transfers and I think the banks don't have to pay for individual transfers, they pay a fee for being part of the SEPA system. If that is correct, then every cent you bank charges you for an instant transfer goes directly to their pockets.
Can we? My experience is the opposite, I live in Spain and fast transfers are definitely not free and not generally available in all banks. The regular case is transfers take about 24-48 hours to be settled between banks
I have a different bank, but as you can see here, instant transfers are free for personal use: https://www.paysera.com/v2/en/blog/what-is-sepa
I have been reading about instant transfers and I think the banks don't have to pay for individual transfers, they pay a fee for being part of the SEPA system. If that is correct, then every cent you bank charges you for an instant transfer goes directly to their pockets.
I have been reading about instant transfers and I think the banks don't have to pay for individual transfers, they pay a fee for being part of the SEPA system. If that is correct, then every cent you bank charges you for an instant transfer goes directly to their pockets.
I can't wait to get all my money stolen with this new and exciting world.
One simple thing, there is no reason for banks to remove their vendor lock-in.
Also, committee paralysis and scope creep. In Canada, they've been debating for ages about extending the scope, like whether they should mandate an API for creating bank instructions rather than just reading bank data. Evidently, the complexity of that is a lot harder than just a data read api.
banks of course. It's in their interest to provide the minimum required by law. Limited access to the interesting bits, worst-in-class api's, inability to allow someone else access to your data that would be required for most use cases etc.
[deleted]
Works really well in the UK. Using my Monzo (current account) app, I have added my building society account & credit card accounts & can view the balances and transactions of the various accounts all in the same app.
For context this means essentially anytime you're shown what looks like an oauth login screen with your bank's logo, and your bank is in the US. (There are a few competitors to plaid, but they use essentially the same methods)
Edit: s/play it/plaid
Edit: s/play it/plaid
I don't understand what you're saying?
If you have a US bank account, and you've ever been asked by a different app to "link to" that account, you've almost certainly used a service that stores your username and password and plain in text and screen scrapes.
A common place to see this is apps that enable instant transfers, like paypal, venmo, and cash app. The main way they offer to link a bank account so that you can send money from that account involves a fake authorization screen that takes your password and stores it.
Scroll down to the "how it works" section on https://plaid.com/use-cases/personal-finances/ and you can see what this looks like.
A common place to see this is apps that enable instant transfers, like paypal, venmo, and cash app. The main way they offer to link a bank account so that you can send money from that account involves a fake authorization screen that takes your password and stores it.
Scroll down to the "how it works" section on https://plaid.com/use-cases/personal-finances/ and you can see what this looks like.
Oh, I think you replied to the wrong person then? Monzo (as well as everyone else in the UK) uses Open Banking, not scraping.
also a user of moneyhub and loving it
as a developer I feel like it's stifled by the entry requirements to let your app connect to a bank. You have to sign-up for weeks of paperwork shite to be allowed to open banking connect to one measly bank, or use an expensive intermediary. Make it easy to connect and watch the apps surge to fill the space.
Having to reconnect all my accounts every 90 days as some kind of safety-measure-by-committee is frustrating as hell, every time I have to do it I want to cry. At least make it a year or let me manage my own connected accounts like a grown up.
as a developer I feel like it's stifled by the entry requirements to let your app connect to a bank. You have to sign-up for weeks of paperwork shite to be allowed to open banking connect to one measly bank, or use an expensive intermediary. Make it easy to connect and watch the apps surge to fill the space.
Having to reconnect all my accounts every 90 days as some kind of safety-measure-by-committee is frustrating as hell, every time I have to do it I want to cry. At least make it a year or let me manage my own connected accounts like a grown up.
I would think universal identity management (yikes) would hold back "open banking" given the article's definition of open banking to mean standardized financial data exchange.
The right mind needs to come up with the right use case application. After that... Boom!
I have lots of ideas... but no one has an open API I can use.
can you tell me what is the delta of lending to deposits interest rates in banks in your country?
in india, banks lend to businesses at around 12-17% interest rate while at the same time, "fixed time deposits" are given 3-5% interest rate. Savings get 2-3% interest rate.
> No killer use case
Yah this
Yah this
This is such a weak reason because it’s completely ridiculous to share your banking password with anyone in the first place.
You only need to look at mobile app stores to see that it is very common for apps to ask for more privileges than they actually need. Sometimes this is even justified to “improve” the customer experience. Why would open banking be any different? Imagine you had to grant access to your entire banking statement history in order to purchase a flight. That’s just forced “consent” and we do it every time we visit a web page.
Nobody in open banking appears to be able to adequately answer the following question: “What is preventing you from taking a copy of my data and storing it for later use?”
No, in the golden age of mass automated surveillance advertising, open banking is for trusting suckers I’m afraid.