Open Banking Three Years On: What Has Actually Changed for UK Consumers?

The promise versus the reality

When the Competition and Markets Authority ordered the UK's nine largest banks to open their data to regulated third parties, the pitch was bold: more competition, better products, and genuine control over your own financial information. Three years after full rollout, about 11 million UK adults have used at least one Open Banking-powered service — a number that sounds impressive until you realise it still leaves roughly four in five people untouched.

So what has actually landed, what quietly fizzled, and where is the next wave heading?

Payments: the quiet success story

If you have paid a tax bill through HMRC's online portal, topped up a trading account, or settled an invoice via an accounting platform like Xero, there is a good chance the money moved through an Open Banking payment initiation rather than a card network. Account-to-account (A2A) payments processed through Open Banking reached 19.4 billion pounds in 2025, according to the Open Banking Implementation Entity (OBIE), up from 4.5 billion in 2022.

For merchants the appeal is obvious: no interchange fees, no chargebacks, and settlement that often arrives the same day. For consumers the benefit is subtler — fewer redirects, no card number entry, and instant confirmation. The catch is that refund rights for A2A payments still lag behind Section 75 and chargeback protections available on credit and debit cards. The Payment Systems Regulator has consulted on extending protections, but nothing binding has landed yet.

Variable Recurring Payments

Variable Recurring Payments (VRPs) were supposed to replace direct debits with something smarter — letting you set spending caps, switch providers without cancellation hassle, and get real-time visibility. In practice, VRPs have gone live mainly for sweeping money between your own accounts (known as "sweeping VRPs"). Commercial VRPs — where a third party can pull variable amounts from your account — remain stuck behind commercial agreements between banks and fintech firms.

Barclays, HSBC, Lloyds, and NatWest have all signed up to the Joint Regulatory Oversight Committee's roadmap for extending commercial VRPs to utilities and subscriptions by late 2026, but deadlines have slipped before. Until then, the direct debit remains king for recurring bills.

Budgeting and aggregation apps

Money Dashboard, Emma, Snoop, and Plum all rely on Open Banking connections to pull transaction data from multiple accounts into a single view. These apps have found a loyal user base — Emma reported crossing two million UK users in early 2026 — but the experience is not always seamless.

• Connection drops: Banks periodically require re-authentication (every 90 days under Strong Customer Authentication rules), which breaks automatic feeds and annoys users.
• Data gaps: Savings accounts, ISAs, and pension pots are often excluded because they sit outside the CMA's original mandate covering payment accounts.
• Categorisation errors: A payment to "AMZN Mktp" might appear as groceries in one app and entertainment in another, undermining the budgeting promise.

The FCA's proposed extension to "Open Finance" — covering savings, investments, insurance, and pensions — would address data gaps, but consultation responses suggest a full framework is unlikely before 2028 at the earliest.

Credit and lending: faster, but not frictionless

Lenders including Zopa, OakNorth, and iwoca now use Open Banking data to assess affordability in near real time. Instead of asking applicants for three months of bank statements in PDF form, they pull categorised transaction data directly, which cuts approval times from days to minutes.

For borrowers with thin credit files — freelancers, gig workers, recent immigrants — this is genuinely useful. Traditional credit scoring leans heavily on credit card and loan history, which penalises anyone who has simply avoided debt. Open Banking data lets lenders see regular income, spending patterns, and gambling activity (a key affordability signal) without relying on Experian or Equifax alone.

The downside: not every lender treats Open Banking data equally. Some use it as a supplement to traditional scores; others have built entirely new models. That inconsistency means your experience can vary wildly depending on which lender you approach.

The consent question

Every Open Banking connection requires explicit consent, and that consent can be revoked at any time through your bank's app or the third party's dashboard. In theory, this puts you in control. In practice, consent dashboards are buried in app settings, and many people forget which services they have authorised. The OBIE's consumer research found that 38 per cent of Open Banking users could not name all the third parties with access to their data.

Security: better than screen-scraping, but not perfect

Before Open Banking, aggregation apps like Yolt relied on "screen scraping" — logging into your bank with your credentials and copying what they found. That approach was fragile, frequently broke, and meant sharing your password with a third party. Open Banking replaced it with token-based API access, meaning third parties never see your login details.

That is a genuine security upgrade. But Open Banking has introduced new attack surfaces: phishing emails that mimic consent screens, social engineering calls claiming to be from "your bank's Open Banking team," and fake apps requesting unnecessary permissions. Action Fraud data shows Open Banking-related scam reports rose 23 per cent year-on-year in 2025, albeit from a low base.

The FCA requires all authorised Account Information Service Providers (AISPs) and Payment Initiation Service Providers (PISPs) to hold appropriate permissions on the Financial Services Register. Before authorising any new connection, checking the register at register.fca.org.uk takes thirty seconds and is worth the effort.

What the next three years might look like

Three developments are worth watching:

1. Smart Data legislation: The Data Protection and Digital Information Act gives ministers the power to mandate Open Banking-style data sharing in energy, telecoms, and insurance. If implemented, switching energy supplier could become as easy as switching a current account.
2. Digital identity: Open Banking verification — confirming your name, address, and account ownership in real time — is being piloted for rental referencing, age verification, and anti-money-laundering checks. If adoption scales, it could reduce reliance on paper documents.
3. The new oversight body: The OBIE's replacement, the Open Banking Limited entity under joint FCA and PSR oversight, is expected to set commercial standards for premium APIs and fund future development through industry levies rather than CMA enforcement orders.

Practical steps if you have not tried it yet

If you are curious but cautious, a low-risk starting point is connecting a single current account to a budgeting app like Emma or Snoop. You will see categorised spending without giving the app any ability to move money. If the 90-day re-authentication annoys you, that is a fair reason to wait — but it is also the strongest safeguard in the system.

For small-business owners, Open Banking payment links can save one to two per cent on every card transaction. Providers like GoCardless, Yapily, and TrueLayer offer straightforward integrations for invoicing platforms.

Open Banking has not yet delivered the revolution its architects envisioned, but the plumbing is in place. The question is whether banks, regulators, and fintech firms can now build services compelling enough that the remaining 80 per cent of UK adults actually want to use them.