The next frontier for open banking
2022
The next frontier for open banking

From open banking to open data economies

Foreword


by Daniel Kjellén Tink CEO

It’s easy to forget how much our lives have changed in the last couple of years. We’ve confronted a raging pandemic that forced digital transformation to take a huge leap forward. Many financial executives may feel as if the industry is moving too fast: with new regulations, technologies and challengers around every corner. On the other hand, some may feel as if it’s not moving fast enough. With slow adoption rates, open banking is not living up to its full potential. Yet. But open banking is not a goal or a destination – it’s a means to an end. The end of meeting customer expectations while improving operations. Access to financial data unlocks countless opportunities to improve experiences and create more inclusive financial ecosystems. And there’s still so much untapped potential that can be created from open banking technologies in order to enhance core banking services. In fact, the most exciting opportunities are still ahead of us – we haven’t come this far for the journey to end here. Open banking is evolving and expanding into open finance, which in turn will power the transition towards embedded financial services. In embedded finance, payments, loans, and even insurance become completely invisible to the customer. This has the potential to change the role that financial institutions play in our lives, from a provider of financial services to an enabler of all industries. A change that has long been anticipated by both B2C and B2B customers. That’s why the next step in this evolution process is the creation of open data economies. Customers expect to be able to rely on their bank wherever they go – and open data economies are the way to meet those expectations. Tink’s mission is to power this new world of finance; to enable financial service providers to evolve and continue meeting customer expectations. We have been a prominent leader in open banking since 2012, serving some of the largest financial institutions in the world – including BNP Paribas, BBVA, and NatWest – as well as a long list of the industry's rising stars such as Snoop, Xero, and Anyfin. We’re helping our customers and partners navigate where to go next as they recognise that beyond banking lies a world which will allow for unparalleled innovation and collaboration. We hope you are as excited about this opportunity as we are. As always, don’t be shy to reach out.
Tink’s mission is to power this new world of finance; to enable financial service providers to evolve and continue meeting customer expectations.

Executive summary

Since the introduction of open banking in 2018, banks have been longing to explore opportunities to take the available technologies a step further. To help transform how businesses operate and interact with financial institutions. Open banking has largely been defined by regulations that aim to increase transparency, security, and control around the access to information and services. But open finance will allow us to unlock the next frontier of financial services. Around the world, open banking and open finance are being defined by a combination of push-and-pull factors. Regulations that support the exchange of data as well as market demand are driving innovation and competition within countries such as Sweden and the United Kingdom. As financial institutions embark on their open banking journeys, it’s important that they continue to monitor how it’s developing in their neighbouring jurisdictions.
The insights in this report make it clear that the opportunities for open finance will be unlocked sooner rather than later. While Europe is trailblazing open banking developments, countries in South America and Asia are not far behind. It’s evident that where demand is strong, the industry is more likely to come together to launch frameworks for banking-as-a-service and embedded finance. Embedded finance has been considered the ultimate application of open banking technologies, making financial services invisible to the naked eye. The efforts taken to build out banking-as-a-service capabilities will define banks’ potential success in this space. Ultimately, these efforts will allow them to create programmes that are at the very foundation of an open data economy. To get to this point, we believe that it is necessary to have a level playing field with the right to data access being equal to all market participants. Getting there will require further support from the regulators, but it is also important that the financial sector approaches use cases as if they are a technology company. Take small steps that deliver quick returns and partner up with experienced service providers with a compatible vision for the future.

Entering a new era of financial services

Last year, we released a report on how market uncertainty caused by the pandemic is propelling financial executives to focus on the creation of new digital services – to enable them to transition to a world of post-pandemic banking. We are now ready to leave the pandemic behind us and move towards a future where the industry can come together to create long-term value for customers. The pandemic has put incredible pressure on financial institutions, as they seek to restore profitability, manage inflation, and support digital innovation to keep up with customer expectations.
For most European banks, open banking emerged as a threat or a burden of compliance. However, over the years it has been equally embraced as an opportunity to offset some of the challenges facing banks today – such as creating intuitive experiences, reducing risks of disintermediation, and increasing engagement through financial insights.
In fact, our research shows that the share of financial executives showing a positive sentiment towards open banking increased from 55% in 2019 to 71% in 2021.And when asked if they perceived open banking as a revolution or an evolution for the industry, a whopping 83% agreed. It's a revolution.
For most European banks, open banking emerged as a threat or a burden of compliance. However, over the years it has been equally embraced as an opportunity to offset some of the challenges facing banks today – such as creating intuitive experiences, reducing risks of disintermediation, and increasing engagement through financial insights.The open banking movement makes it easier for new competitors to enter the market and for customers to get access to more affordable and personalised services. But it also enables banks to benefit from higher degrees of automation. This, in turn, allows for innovations that increase conversion at onboarding. It improves customer relationships and provides tools to control risk. As open banking is becoming more established in the market, regulators and industry participants are already starting to talk about open finance and open data as the next frontier of innovation. This report expands on these topics, providing a coherent introduction to open banking and presenting how it is taking shape around the world. In it, we will explore a new definition for open finance, and explain why all of this is driving the market towards a new frontier for open banking – open data economies.

A brief history on open banking in Europe

Before we address where we are today and where we’re going, let us explore the history of open banking. To most people around the world, open banking describes an industry movement defined by the exchange of data and services between financial institutions and third-party providers (TPPs), to deliver enhanced capabilities and experiences to the market.
While the term open banking has been around for decades, it was made popular by the Competition and Markets Authority (CMA) in the United Kingdom (UK) after ordering the nine largest banks to publish application programming interfaces (APIs) with Open Data standards in 2017.The CMA called this remedy 'Open Banking' and it has since created much confusion, as it simultaneously describes an industry movement and an antitrust remedy.a whopping 83% agreed. It's a revolution.

Google Trends on ‘open banking’

Figure 1 Source: Google Trends, Search term ‘open banking’, Worldwide, Jul 1,2015 - Jan 1,2021

To find the first European examples of open banking, we need to go way back before the inception of the Internet. In 1977, the Deutsche Bundespost (German federal post office) launched a screentext solution called BTX that offered customers of the West German bank Verbraucherbank (today known as Norisbank) the ability to access their bank account on the television. Users would give permission to Deutsche Bundespost to access their bank account in order to display their balance, transaction history, and savings on the TV and purchase products from various mail-order companies such as Otto, Neckermann, and even TUI travel. Making financial data available and accessible via TPPs was a revolutionary idea at the time and may have been one of the first attempts at building an open banking ecosystem.
Advertisement by Verbraucherbank for the BTX service known as ‘My bank in the living room’ from the 1981

Source: Heise Online, ‘Vor 30 Jahren: Online-Banking startet in Deutschland’, November 2010

Since then, there have been countless applications of open banking. For example the first online bank in the UK, Egg Banking plc. , introduced an aggregation service called Egg Money Manager in 2001, which enabled customers to view and manage their payment, savings, and credit card accounts from any British bank via a single web page. In some cases, customers would be able to view other products such as investments, their mortgage and any personal loans too. But Egg wasn’t the only bank doing this in Europe. Similar solutions were being launched in countries such as Spain, Portugal, Belgium, and Sweden, where Tink pioneered the aggregation of financial data via the customer’s mobile banking interface in 2012.
Screenshot of the multi-banking solution BBVA tú cuentas (2008)

Source: Forrester, ‘Case Study: BBVA’s Tú Cuentas Shows What Next-Generation Online Banking Will Look Like’, July 2008

Regulating access to payment accounts

Seeing how new technologies that provided access to accounts had swept the industry, giving rise to a generation of payment service providers, the European Commission (EC) proposed the revised payments services directive (PSD2) in 2013. Today, PSD2 has been fully enforced and transposed by the Member States of the European Union (EU). PSD2 regulates access to payment accounts for authorised account information services providers (AISPs) and payment initiation service providers (PISPs). These TPPs can only access payment accounts under strict conditions. The EC believed this would level the playing field for all payment service providers, making payments more secure, and increasing consumer protection.

SCA – strong customer authentication

PSD2 is complemented by a set of delegated regulations drafted by the European Banking Authority (EBA), known as the Regulatory Technical Standards (RTS). There's one delegated regulation for strong customer authentication (SCA) and common and secure open standards of communication (CSC), which was enforced on 14 September 2019. Despite the name, the RTS for SCA and CSC, is neither a standard nor technical. This regulation specifies when and where banks need to apply SCA and gives banks operating in the EU the option to provide a dedicated interface – typically an application programming interface (API) – to give TPPs secure access payment account information and initiative payments on behalf of a customer. These dedicated interfaces are typically referred to in the industry as PSD2 APIs.

PSD2 regulates access to payment accounts for authorised account information services providers (AISPs) and payment initiation service providers (PISPs).

A growing number of TPPs

Figure 2 Source: Konsentus, Q4 2021 Third Party Provider Open Banking Tracker, January 2022

A growing open banking ecosystem

Since Europe’s introduction to PSD2, the number of TPPs that are authorised to access payment accounts – which under PSD2 are either AISPs or PISPs – have increased significantly. By the end of 2021, the European Economic Area (EEA) and UK together counted 524 authorised AISPs and PISP, up 16% from the previous year.

The four TPP types

Figure 3 Source: Tink, 2022

Data intermediaries

These TPPs have built a business connecting to banks to access financial data and transfer this data to businesses so that it can be used for a requested service. Some data intermediaries hoard data in order to generate competitive market insights, others categorise and enrich the data so that its customers can use it to build services or improve their processes.

Vertical specialists

The financial industry is crowded with service providers who are each specialists in very specific disciplines. Over the last few years, there’s been a strong uptake of open banking services by such service providers to enhance existing solutions used for customer due diligence (CDD). Such as creditworthiness assessment, fraud detection, digital identity verification, and much more. These vertical specialists typically provide solutions to allow financial institutions to enhance their existing services.

Industry innovators

Although all TPPs are innovating within their own respective fields, industry innovators are the businesses that are transforming how we look at data and financial services. Industry innovators use open banking to fundamentally change how we engage with those industries. For instance, through carbon footprint calculations, the role of a retail bank is suddenly being extended into that of a lifestyle coach. Through open banking-enabled loyalty schemes, manufacturers could build a community that transcends retailers. With personal finance management (PFM), utility providers can help households identify opportunities for cost savings.

Payment solutions providers

A new generation of payment institutions is leveraging the technologies that have been unlocked by open banking. These TPPs are using open banking to build a framework for interbank account-to-account (A2A) payment services. Some rely solely on the functionality available through the PSD2 APIs for payment initiation. Others collaborate with banks to build joint solutions or propositions beyond the scope of PSD2. For instance, to enable users to initiate interbank payments that are exempted from SCA, or to enable instant payment where there are no such rails.

From open banking to open finance

As the term open banking has finally established itself, the discussion is moving on towards the opportunities around open finance. Open finance goes beyond the scope of data and services available at your bank, covering the financial information and services that may exist across other areas of finance. It captures all of open banking and more. Essentially, open finance describes the access of data and services between financial data holders and third-party providers in order to create value for the market. With the customer’s consent, personal financial data related to pensions, tax, and insurance could all be accessed and retrieved by a trusted TPP. This opens opportunities for better-tailored consumer services and payments, as well as other financial products. Just as with open banking, open finance – and by extension open data – is not defined by the sharing of data and services, but rather by the access to it.

Distinguishing the movement, regulations and industry initiatives

Just like open banking, open finance often means different things to different people. This is where it gets confusing, but we'll try to untangle it for you. While regulators talk about open finance as a potential opportunity to unlock innovation and competition, industry participants talk about open finance as the next frontier for open banking – with untapped potential. Specifically, to some people open finance refers to an umbrella term that may capture all of the commercial opportunities outside the regulated scope. However, to most people in Europe, open finance describes the access to financial data and services that fall outside the scope of PSD2 and the UK Open Banking initiative. It refers to the opportunities for banks to provide premium APIs which would allow them to commercialise access to savings information, credit card information, investment information, and so on. Commercialising access to financial information beyond payments would give banks an opportunity to earn back their investments from their compliance efforts.

Levels of data access in open banking, open finance, and open data

Figure 4 Source: Tink, 2022

While the access to such information is captured under the open banking regulations in some jurisdictions (see ‘Country insights’), in Europe there are no financial regulations regarding open finance. This means that access to all financial information outside the scope of PSD2 continues to be governed horizontally by the General Data Protection Regulation (GDPR). In 2020, the EC published its Digital Finance Strategy which states that ‘by 2024, the EU should have an open finance framework in place’. This framework would allow consumers to have better access and control over their personal data, enables TPPs to offer more personalised services, and lets customers compare products and find more cost-effective options. Similarly, the UK’s Financial Conduct Authority (FCA) published its position on `Open finance` as an industry movement. The FCA believes access to more financial data allows for more cross-sector innovation and helps unlock the value of data across the economy. In other words, authorities are currently evaluating whether access to financial data – beyond payments – should be regulated by the financial vertical or for all general businesses in every industry.

Initiatives that go beyond PSD2

Berlin Group’s openFinance Framework

The Berlin Group is a payments interoperability standards initiative, focused on establishing open and common ground for technical and organisational requirements for the deployment of digital finance. Throughout 2022, their aim is to encourage banks to launch commercial APIs from their openFinance Framework, which will entail the extension of service capabilities that are not regulated by PSD2. These commercial APIs could include extensions to payments services, giving TPPs the ability to block funds, defer payments, offer pay-by-loan (with integrated consumer loans), set up SEPA Direct Debit Mandates, and more. They may also go beyond payment account information by unlocking access to savings, loan and securities information, enable electronic identity services, and even enable the TPPs to open current accounts or request a loan on behalf of the customer.

The SEPA Account Access Scheme (SPAA)

The European Payment Council’s SEPA Account Access Scheme, or SPAA, covers the set of rules, practices and standards that will allow the exchange of payment accounts-related data. It builds on investments made in the context of PSD2 and is in line with EU legislation. SPAA considers the input from major European standardisation initiatives active in the field of PSD2 APIs, such as the Berlin Group. It is said to become a stepping-stone towards open finance beyond payments, and potentially provide a template for open data – beyond finance.

Variable recurring payments (VRPs)

Although VRPs do not strictly qualify as open finance, they are often treated that way, because they fall outside of PSD2 and the CMA’s Open Banking initiative. VRPs were originally introduced by the Open Banking Implementation Entity (OBIE) in the UK, to allow payments to be initiated with an exempted or delegated SCA flow. This was introduced so the nine largest banks could allow customers to make automatic ‘sweeps’ between accounts in their name. However, the industry quickly realised that this technology would also allow PISPs to create competitive payment setups and would be willing to pay a premium for these capabilities. This would allow the banks to earn back their potential losses on overdrafts due to sweeping, and TPPs to launch ‘bank-on-file’ payment solutions that are similar to recurring card, card-on-file, and Direct Debit. If proven successful, VRPs could even start to replace a significant portion of existing e-commerce payment volumes. While the first small scale pilots are starting to take shape, it is likely that the wider market will be opened up by a large retailer or platform.

Barclays: ​​creating new revenue-generating propositions

Who he is:

Harcus Copper is Head of Integration and Information Services at Barclays Corporate and Investment Bank. He’s building a new generation of services by building on the open banking efforts of the retail bank.

What he’s known for:

With over 27 years' experience in corporate banking, Harcus has developed his career across multiple disciplines. During his 32 years with Barclays he has seen the industry change first hand.

Why we spoke to him:

Harcus has led the first forms of information exchange at Barclays by building and launching SWIFT Corporate Access, managing their Host-to-host solution and developing a direct to client API proposition. Now he’s taking his wealth of experience into the open banking world.

How did Barclays start its journey towards Premium APIs?

Barclays’ journey started in the Retail Bank with the CMA (Competition and Market Authority) Order for Open Banking in 2017. It was a fundamental imperative for why we started building APIs for the ecosystem. As for every bank, regulatory change/development initiatives are always prioritised. For me, it was also an opportunity to extend the work into the corporate banking space. Traditionally, corporates that hold accounts with multiple banks have relied on the banks themselves to share balance and transaction reporting via SWIFT messages and present it through their online channels or become SWIFT members in their own right via the SWIFT for Corporate service. Open banking is changing this, as our corporate customers start to expect us to enable them to give Third Party Providers (TPPs) automated access to their information.
We find that as long as the goals are clear, building APIs for compliance and commercial purposes is very similar from a project management perspective to discretionary change projects. However, where the CMA is very articulate in terms of what needs to be delivered, that is very much from a Retail perspective, and it is not always clear which API features and functionalities our corporate customers would need from us. Typically, when launching new technologies, one of the key metrics for success is user adoption. There’s a decent amount of usage of our Open Banking APIs in the retail and business banking space. However, in the corporate banking world there’s nowhere near the same amount of usage – yet. Looking at the success of SWIFT, we anticipate that open banking will fundamentally transform how corporations engage with banks. Today, we enable our corporate customers to give TPPs access to their balance and transaction reporting, and to initiate payments. The next frontier for Barclays is creating our own propositions with APIs that support real-time treasury, embedded trade financing, and more efficient account receivables through quicker settlement.
‘The biggest opportunity for Barclays is to become more than a bank: to become a technology provider to all of our corporate customers – regardless of their respective industries.’

What do you consider the biggest opportunity?

The Barclays project team for commercial open banking was assembled during 2021, and so far, we’ve been primarily investigating how we can bring our compliant APIs for Account Information Services (AIS) and Payment Initiation Services (PIS) into the corporate banking world. Let’s not forget that it’s still early days for the entire open banking industry movement. We’ve now laid down the foundation from an infrastructure perspective – thanks to the efforts of the CMA – but we haven’t even scratched the surface of the broader opportunity. Open banking has two sides. On the one hand, it’s about users consenting to the access of information. For example, as a financial controller at a utilities firm, I may want to aggregate my financial data across banks and geographies to improve reconciliation cycles, quarterly reporting, or financial planning. On the other hand, it’s about externalising APIs that may help our corporate customers gain better access to our financial services and interact with their own customers in automated ways. This can be in the form of payments, which is currently regulated as payment initiation under PSD2. But it can also allow corporate customers to easily spin up a virtual IBAN account, exchange currencies, or request a loan. I believe the biggest opportunity for Barclays is to become more than a bank: to become a technology provider to all of our corporate customers – regardless of their respective industries.

How do you build the business case for your open banking projects?

We have a reasonable idea of where we want to be with our API catalogue over the next couple of years. A good analogy is the launch of our current host-to-host for payment initiation nearly 10 years ago. This is where files of payments are automatically instructed from a Corporate’s ERP or TMS application in a fully integrated way without having to repeat processes and authentication steps via the Bank’s online channel. When we built this, our business case stated that it would be successful if we would onboard a small number of large multinational corporate clients – today we have far exceeded those expectations with clients of all sizes and complexities connected. The point is, like any business, we may not have an immediate business case to realise value for all of the services on the roadmap. We have an estimate of how fast the market is moving, and we potentially risk falling behind if we don’t keep moving the open banking proposition forward. Our corporate customers will be expecting that their bank can connect to the services that they need to manage their business in an ever more integrated, automated and value adding way.

State of open finance around the world

Many countries around the world are launching initiatives inspired by actions taken in the EU and UK. However, the fastest development of open finance occurs in markets where there is a mix of factors that push and pull.

The global open finance maturity index

Figure 5 Note: In order to illustrate open finance maturity at a generalised geographic level, we developed the global open finance index. This model shows how countries compare according to market demand, where 1 means no demand, no TPPs, no competition and 5 means high demand, many TPPs, highly competitive. Regulatory support shows the level of regulation, where 1 = unregulated, 2 = general data regulation, 3 = payment data regulations, 4 = financial data regulations, and 5 = open data regulations.

Factors driving open finance maturity

When studying how open finance is evolving, market demand is the most important predictor of open finance maturity in any given market. Regulations for data access and TPPs can be an enabler for market adoption (like in the UK and Sweden), but also an inhibitor for the industry (Australia). The comparisons also show that banks are generally more willing to provide access to payment account information than they are to identity, loan, or savings information. This is primarily because banks see that the risk for disintermediation and attrition is greater for some data points than others. For example, with the low interest rates today, access to mortgage information would allow competitors to inform customers that they can lower their monthly costs if they would move or refinance their mortgage. Similarly, access to savings information could reveal whether customers are getting the highest yield on their equity.
The analysis shows that innovation is slower in markets where open finance services are dominated by a small number of incumbent service providers. In markets without clear open banking regulations, it’s harder for smaller TPPs to challenge the status quo and offer compelling alternatives to existing services. Finally, open finance adoption is also subject to the cultural appetite for electronic payments. Cash-heavy markets generally see lower adoption of financial management services than markets friendly towards e-payments.

How different regions are adopting open finance

Western Europe (WE) is leading by example but continues to face obstacles

The WE region sees mixed levels of market adoption and regulatory support for open banking and open finance. By the end of 2021, the EBA had still not been able to uniformly enforce the RTS across the EU. The UK's FCA is making changes to the RTS in order to give TPPs more room to innovate, and the EBA has proposed similar changes. The biggest challenge for open banking adoption remains the quality of PSD2 APIs across the region. This is mainly due to the obstacles in the user interface that continue to inhibit adoption of open banking by consumers and businesses. Sweden and the UK stand out for their ecosystem potential and regulatory support as they count the highest number of authorised TPPs. They are witnessing the first signs of scaled adoption with millions of citizens using the services every day.

Supporting the market adoption with regulations in North America (NA) and Latin America (LATAM)

The NA and LATAM regions are experiencing a strong pull from the market. With a large underbanked population, consumers and businesses are looking for opportunities to improve their financial situation through the services that TPPs are taking to market. Many TPPs have emerged that are accessing bank information through the customer interface. Regulators in the United States and Canada are contemplating rules for open banking and open finance, and Mexico is expected to publish provisions for open finance this year. The regulators in Brazil have advanced the most and aim to support open finance.

Regulator is either the driver or the inhibitor in Asia, Pacific and Japan (APACJ)

The APACJ region is a mixed bag at different ends of the spectrum. So far, the Australian Consumer Data Right (CDR) has not accelerated open banking adoption and has even stalled progress for some TPPs. In contrast, open banking has been so successful in countries such as Hong Kong, India and Singapore that smaller TPPs are now struggling to challenge the dominant position of the incumbent TPPs.

The Middle East, North Africa and Turkey (MENAT) will wait to see which way the wind blows

The MENAT region has condemned businesses directly accessing the customer interface in order to retrieve information. This has slowed down innovation as TPPs become dependent on banks to make their customers' data available. Various data intermediaries have emerged to work with banks to expose APIs, but there are few use cases to show. Turkey has issued regulations to align with the EU’s PSD2 and will be looking to the establishment of both AISPs and PISPs. The United Arab Emirates also aims to align with PSD2, but is hoping the market will lead the development of APIs.

Nordea: leading towards the platformisation of financial services

Who he is:

Gunnar Berger is Nordea’s Head of Open Banking. He’s building a technical platform for handling open APIs in Nordea as well as for establishing processes for handling external developers and for driving co-creation activities with TPPs.

What he’s known for:

Driving the transformation inside-out. Gunnar is delivering solutions that are changing the traditional way financial services are offered and consumed.

Why we spoke to him:

Gunnar has a vision that goes beyond PSD2, and ensured that Nordea was the first bank in the Nordics to launch an open banking strategy.

How has Nordea approached the open banking movement?

We started working on our open banking strategy already back in 2015 – before PSD2 was even published. We simply referred to ‘channels’ at the time, but it touched every part of the business. I was supporting a progressive payments strategy for this, and one of our early conclusions was that if Nordea was to be profitable, it needed to go through significant changes to create an API platform where these channels could exist. Even back then we were in the midst of an ongoing digital transformation, with the goal to become a true technology company. I was appointed to start the API platform and sent out an email asking for volunteers. Immediately, I got 10 to 15 people who were eager to join the cause, and, like that, our open banking division was born.
The goal was to become profitable, to sell APIs. We were running with two similar budgets: one to meet compliance requirements, the other for commercial opportunities. When the EBA published its opinion on implementation of RTS in June 2018, the scope for compliance increased significantly and the budget grew by nearly 10X. Our goal was to create compliant PSD2 APIs by 14 September 2019 – which is when the RTS was enforced – but we have since then become frustrated by the EBA, as every opinion published since has increased the scope even more. In parallel, we continued to work on building out the commercial channels. Even though the focus was largely on PSD2, we are confident that our customers will want to benefit from the open banking services that we take to market. Evidence for this was found in 2017, when we asked for beta testers of our banking APIs. We got so many positive responses in the market that we had enough developers and beta testers joining the developer portal to start building a community of API users.
‘I am convinced that when you introduce new technologies, they will be used to replace old systems, processes and habits.’

Is embedded finance and banking-as-a-service part of your open banking strategy?

Absolutely! The industry sometimes talks about open banking as if it’s restricted to PSD2 or other regulations. It’s not. At Nordea, we’ve always said that our open banking strategy encompasses many of the modular banking business models. One of the smart things we did – working with both compliance budgets and commercial budgets – was that whatever we would build for PSD2, we could also commercialise for corporate customers. I see a lot of banks have outsourced the heavy lifting for PSD2. But if they ever want to commercialise their APIs and benefit from the opportunities for open banking and open finance, they’d need to start all over again.

Did you need to modernise your IT landscape?

Not really. We embrace the complexity. People forget that Nordea is the product of a series of mergers and acquisitions between Finnish, Swedish, Danish, and Norwegian banks. These mergers and acquisitions have created a complicated network of systems, and so we need to build on top of that. We have basically created a shell of APIs around the core. So now people don’t have to care about the underlying systems and need only to focus on the service.

Looking into the future, what do you see?

My long-term vision is the platformisation of financial services. At Nordea, we have everything in place to go there today. I am convinced that when you introduce new technologies, they will be used to replace old systems, processes and habits. Even if we don’t know how or by whom some of our innovations will be used, I believe developers will find a creative application for it.The API platform we’ve built is a slick piece of technology compared to the old junk that banks have been working with. We don’t yet know all the ways it will be used, but it’s the foundation for a new generation of financial services.

Embedded finance and the future of banking

Just like open finance, many people are talking about how embedded finance is the future of banking. Embedded finance describes the integration of financial services with the services, products, or technologies offered by non-financial institutions. In essence, this means making the activation of financial services frictionless or even invisible to the user, as they interact with businesses and request services in other industries.
The concept of embedded finance grew in popularity when Uber showed the world that payments can be entirely removed from the taxi experience. Uber users simply need to enter a destination and agree with a price estimation. Once arrived, the payment happens in the background, and they can see the details of the payment when returning to the Uber app. By embedding the payment experience into the taxi experience, Uber has made taxi services more convenient for customers by removing the awkward paying stage. The truth is that financial services provide a means to an end. Most people aren’t out to get a credit card, mortgage, or insurance for the sake of it. These financial services are needed in order to be able to reach another goal: to buy something, to receive a service, or to gain security. Currently, requesting financial services creates interruptions in the customer experience. But embedded finance can change this by leveraging the information already available with your existing bank or service provider.
For embedded finance to work, a bank may need to verify your identity, estimate your income, or calculate your risk. Financial institutions have realised that if they opt to work closer with their corporate customers across industries, there’s an opportunity to make financial services an integral element of their business processes. Such as enabling supply chain managers to automatically file for credit when capital reserves are running low. Or consumers to automatically authorise the access to their transaction statements when they request a lease. This means embracing the banking-as-a-service archetype to expose APIs that can easily be used by TPPs in order to create embedded finance solutions.

From embedded finance to open data economies

From a customer perspective, this implies that financial products are increasingly delivered contextualised, at the point of need. Embedded finance propositions often leverage open banking (and, in the future, open finance) API infrastructure to streamline specific parts of the product experience, like identity and affordability checks. But for embedded finance to truly work, banks may also need access to information held by the non-financial institutions. This is where true open data economies are formed, as the exchange of data and services starts to transcend that of the financial services industry.

BCG: building capabilities and infrastructure for the future

Who he is:

Kunal Jhanji is a core member of Boston Consulting Group’s (BCG) Financial Institutions practice. He leads BCG's payments work in the UK and is a member of the firm’s Transaction Banking and Payments management team.

What he’s known for:

Kunal developed BCG's global open banking proposition and has helped several large European banks deploy innovative partnership strategies.

Why we spoke to him:

He understands the challenges and opportunities related to open banking. He’s big on helping financial institutions leverage open banking APIs in order to optimise their core banking propositions.

What are some of the areas that still have untapped potential?

There’s been a lot of focus on the small and medium businesses (SMB) segment with open banking. We’re now seeing accounting software platforms that integrate open banking APIs, such as Xero and Sage, gaining significant traction from the market, but I actually think we’re still at the early stages of adoption. For SMBs, there is a huge opportunity to enhance bank operations across the customer journey – whether it’s to improve onboarding, reduce risk, or increase engagement.
Banks should recognise that they can leverage open banking in order to identify opportunities for commercial card issuance, providing access to working capital to, for instance, respond to seasonalities, and ensuring that SMBs do not limit themselves in the financial options available to them.Beyond this, there are plenty of new infrastructure opportunities. The challenge is integrating these new data insights into enterprise software solutions that are being used to run the business. I’m talking about real-time communication in the customer relationship management and enterprise resource planning tools that will finally allow real-time decision making. These insights will allow banks to continuously anticipate financial needs and empower them to respond in a relevant and timely manner.
‘Banks need to invest in today’s market opportunities that will reap a value in 5-6 years.’

How do you see banking-as-a-service creating value?

At BCG, we would say banking-as-a-service, or BaaS, propositions can be defined across four dimensions: Product, which describes the problem being solved, such as payments acceptance or lending.Service, which describes the key to delivering the solution. Delivery, which depends on the licence arrangement. And segment, which describes the target audience for the offering. We believe BaaS is an immediate opportunity that financial institutions should pursue. According to our calculations the BaaS market represents close to $6 billion in spending in Europe and approximately $2.5 billion in the UK. I think the true power of BaaS is only unveiled once banks and merchants come together – when banks enable non-banks to offer core banking solutions. This is what we often call ‘embedded finance’, and it's changing the industries around us. For instance, buy-now-pay-later (BNPL) is a great example that’s merging the product and service – where the simple product (zero-interest credit) becomes invisible to the customer, and it’s all about the experience of buying a product. So far, the BaaS opportunity has primarily been addressed by niche players. Traditional banks have capability to create compelling offerings but only if they are able to direct their value propositions in the right direction.

What do you see as some of the main challenges for open banking?

There are many challenges that cannot be overlooked if banks are pursuing a holistic open banking strategy. One thing is imperative, the bulk of investments need to help build capabilities and infrastructure for the future. The investment that banks have made on the infrastructure side have been important, but many continue to lack the capabilities that allow for real-time decisioning. They need to think about the go-to-market strategy as a combination of infrastructure, capabilities, and product.If you look at the fintechs in the card-issuing space – the challenger banks and neo banks of the world – many have leap-frogged banks in the way they enable real-time issuing of the cards. The onboarding, customer due diligence, and origination of services happen in a matter of seconds or minutes, instead of days or even weeks. We believe there are many building blocks available in the market, but the challenge is bringing these components together in a way that is coherent and allows banks to keep up with the digital-native banks in the market. We are finally seeing some banks waking up to the challenge. They understand that infrastructure is patchy, the quality of their APIs is patchy, and their services are often patchy too. There have been huge investments in the market, and some markets are moving faster than others. We believe we’ll see the strongest growth and pace of innovation in areas such as payments, lending, and FX-aaS*. Banks need to invest in today’s market opportunities that will reap a value in 5-6 years.

Unlocking open data economies

The promise of open finance is that it will allow TPPs to unlock value across every industry in the economy, making services more efficient and relevant. Some regulators are recognising that creating a level playing field around the access to data will allow for open data economies to emerge. To protect the integrity of the service, the ecosystems emerging and drawing value from customer information should follow a set of standard data access principles:

1. Customers must give explicit consent

Going back to the original rules under data protection, the processing of personal information can only happen with explicit consent of the customer. This consent is not only needed for the processing of information, but also for the access and retrieval of information. Explicit consent is a fundamental principle to data privacy and stands at the core of the exchange of data and services to create value for a customer.

2. Third party providers must identify themselves

Regardless of the information that TPPs are accessing, when the business does not identify itself, the data holder may suspect the TPP is impersonating the customer. Identification is important as it would allow a data holder to verify that the party that is accessing information is a legitimate business that is providing a genuine service to a mutual customer.

3. All information and communication must be secured

Whether information is transferred to or from the data holder, it is important that any communication is encrypted and secured so that it can only be read by the authorised parties. This lowers the risk of a data breach and ensures it cannot be processed by unauthorised parties.

4. Liability is with the party where security was breached

In an open data economy, where information is moving between parties who may or may not have contractual relationships with one another, it needs to be clear who is liable when information is breached by an unauthorised party. The basic principle for an open data economy should be that the party that fell short on its security responsibility is liable for any damages inflicted on the customer. These basic principles are important to avoid limiting how and what kind of access technologies we use. This means TPPs can innovate around the changing customer interface, whether it’s virtual reality, voice, or connected devices. This allows market-driven demand for effective and secure ways of information exchange, without data holders being required to make investments in technologies that may never see traction.

Programmes and data elements unlocked through open data economies

Figure 6 Note: List of information elements is not exhaustive or mutually exclusive Source: Tink, 2022

Concluding remarks

Open banking is setting a foundation for decades of innovation to come – whether it’s through open finance, embedded finance or open data economies. Last year, we found that financial executives believe that open banking is a revolution that will take a decade to mature because of legacy infrastructure and the scale of technological change required within many financial institutions. Open finance is being embraced as an opportunity to start commercialising access to information, but also to make finance invisible to other industry operations. But the revolution won’t just happen in finance – it will quickly pull in other industries that have a stake in better accessing their data. Regulators see this as a way to increase competition, but at the same time it is putting banks in a powerful position. Banks have a unique opportunity to work together with TPPs to create a digital ecosystem that transcends finance and allows for embedded solutions across every open data economy.

Getting ready for open data economies

In the pursuit of open data economies, banks are faced with an enormous opportunity. If banks effectively work towards the formation of digital ecosystems around their products and services, every part of the industry stands to gain from it. But first, there are three important factors for all banks to consider:

1. Becoming a software company

Open banking isn’t the compliance burden many thought: it’s been an eye-opener, and is changing the world around us. Today’s technologies allow financial institutions to take on a different role in the way they interface with customers and the ecosystem: the role of technology providers. The move towards banking-as-a-service and embedded finance requires financial institutions to deliver technology solutions that developers can easily integrate to create improved processes and services. Accepting this fact is the first step towards embracing open finance and open economies. However, operating as a technology company goes beyond the way a bank organises its teams, or the channels through which it communicates with its customers. It’s about identifying and building new relationships and revenue streams that diversify the business. It’s about recognising that a bank’s trust should not be taken for granted, and that it can play a key role in the access to data across industries.

2. Thinking big but starting small

It’s easy to start daydreaming about all the value-added services that can be created through the access of industry data. However, the first challenge for financial institutions remains the same: compliance and realising the value of open banking.Banks have a wide range of options when it comes to their open banking tactics. They can choose to operate as a platform, inviting other TPPs to position services for their existing retail or business banking costumes. Banks can also decide to focus on externalising services to corporate clients by launching finance solutions to streamline financial planning, reconciliation, and access to credit. One area where open banking can generate real results is in enhancing existing banking operations. Using open banking technologies can help reduce risk and increase productivity, while improving the customer experience during the onboarding process. The exciting thing is that these small opportunities exist with every stage of the customer journey and can easily be realised using the technologies available today. For example, banks can use open banking to access a user’s full name to accelerate a simple due diligence flow, to access a user’s IBAN to quickly set up a Direct Debit Mandate for billing purposes, or to access transaction history to do real-time risk assessments. These are all incremental improvements to existing processes which can each lower costs and reduce fraud, while increasing conversion and improving the customer experience.

3. Building with a partner with a compatible vision

Rome wasn’t built in a day. Some open banking, open finance, and open data economy use cases will require years of collaboration between banks, fintechs, and service providers who each play their part. Fintech partners can help provide proven open banking use cases and enable banks to quickly respond to the market. Ultimately, both banks and TPPs will need to recognise that they can only realise the next frontier of open banking by working together. Building with a partner with a compatible vision ensures that you are each working towards a similar goal.

About this research

Every year, Tink releases a series of reports highlighting how the open banking market is maturing, how executives are responding to the opportunity, and how financial institutions are deciding on investments.
In our first 2022 report, we decided to come out with some relevant insights into the long-term picture of open banking. Although no one truly knows where the market will be, the infrastructure that the industry is putting in place through open banking will unleash a wave of new opportunities that span across industries. This study relies on intensive desk research of government websites to understand the legal status of open banking in each country. It is also backed by countless interviews with local practitioners who have helped provide relevant context to the findings.

About Tink

Tink is Europe’s leading open banking platform that enables banks, fintechs and startups to develop data-driven financial services. Through one API, Tink allows customers to access aggregated financial data, initiate payments, enrich transactions, verify account ownership and build personal finance management tools. Tink connects to more than 3,400 banks that reach over 250 million bank customers across Europe. Founded in 2012 in Stockholm, Tink became a wholly owned subsidiary of Visa in 2022. Tink’s 500 employees serve more than 300 banks and fintechs in 18 European markets, out of offices in 13 countries. We power the new world of finance.

Curious about how we can power your ideas?

If you feel intrigued about the many possibilities of open finance and want to start building, we can help you put your ideas into practice. Get in touch with our team to find out what we can help you achieve:

contact us

contact us
;