Open Banking in 2026: from promise to default

For most of the last decade, open banking lived in the slide decks of payments conferences and the regulatory roadmaps of central banks. In 2026 it is finally living somewhere more important: inside the checkout flows of real merchants, the treasury stacks of real businesses, and the banking apps of hundreds of millions of consumers. The shift from "interesting alternative" to "default option for the right use cases" has happened quietly, but it has happened.

At its core, open banking is a simple idea. Banks expose secure APIs that — with the account holder's explicit consent — let regulated third parties read account data or initiate a payment directly from that account. No card network in the middle, no 16-digit number to store, no chargeback scheme to navigate. The plumbing is the existing instant-payment rails that banks already operate: SEPA Instant in the eurozone, Faster Payments and the New Payments Architecture in the UK, Pix in Brazil, UPI in India, and FedNow and RTP in the United States.

The usage numbers tell the story better than the marketing does. The UK, which has had a mandated open banking framework since 2018, crossed 13 million active users in 2025 and is now processing more than 25 million open-banking payments per month, with year-on-year growth still running above 70 percent. In the EU, SEPA Instant coverage became effectively universal in early 2025 after the Instant Payments Regulation forced every euro-area PSP to send and receive instant credit transfers at the same price as a standard transfer. Brazil's Pix, which sits in the same conceptual family, now handles more transactions per month than every card scheme in the country combined. In the United States, FedNow participation passed 1,300 institutions during 2025, and the first wave of consumer-facing pay-by-bank checkouts — driven by merchants tired of card interchange — is finally visible at the till.

The specialist providers building on top of these rails have matured in parallel. Companies like Yaspa have focused on instant pay-ins and instant payouts for regulated verticals such as iGaming and trading, where settlement speed and identity assurance matter more than a few basis points of cost. Others, like Contiant, have pushed into account-to-account commerce and recurring billing, layering risk scoring, refund orchestration and reconciliation on top of the raw bank APIs so that a merchant integration looks much closer to a modern card PSP than to a bare bank connection. The pattern is consistent across the category: the rails are commoditising, and the value is moving up the stack into conversion, risk, and money-movement workflow.

Three trends are shaping where this goes next. The first is variable recurring payments, or VRP. The UK has spent two years rolling VRP out beyond the original "sweeping" use case of moving money between a customer's own accounts, and commercial VRP — where a merchant can pull a variable amount from a customer's bank account within agreed limits — is now live with a growing list of banks. For subscriptions, utilities, and any business that today relies on card-on-file, this is a genuine alternative: no expiring cards, no scheme fees, no 3DS step-up on every renewal. The EU is heading the same way through PSD3 and the Payment Services Regulation, which formalise a premium API tier and a clearer commercial model for the banks that provide it.

The rails are commoditising. The value is moving up the stack into conversion, risk, and money-movement workflow.

The second trend is the convergence of payments and identity. Because an open banking payment is initiated from inside the customer's authenticated banking session, the payer is, by definition, the account holder. That single fact quietly solves a long list of problems: source-of-funds checks for regulated operators, KYC refreshes for high-value transfers, age and residency verification for restricted goods, and confirmation-of-payee checks that materially reduce authorised push payment fraud. Providers that started life as payment initiators are increasingly selling an identity product with payments attached, rather than the other way around.

The third trend is the slow but real shift in consumer behaviour. Pay-by-bank used to be the option no one clicked. In categories where it has been presented well — wallet top-ups, high-ticket retail, tax payments, charity giving, and government services — selection rates of 20 to 40 percent are now common, and in some UK merchants pay-by-bank has overtaken debit cards as the preferred method at checkout. The reason is mundane rather than ideological: the flow is fast, it uses the banking app the customer already trusts, and on mobile it is often fewer taps than typing a card number.

For businesses, the practical advantages stack up quickly. Acceptance costs on high-ticket transactions fall by an order of magnitude compared to card interchange. Funds settle in seconds rather than days, which compresses working capital requirements and makes instant payouts — refunds, winnings, marketplace disbursements, payroll — operationally trivial. Chargeback exposure effectively disappears, because the payment is a push from the customer's bank rather than a pull against their card. Reconciliation becomes simpler because every payment carries a clean, structured reference back to the originating account.

For users, the benefits are quieter but real. There is no card number to leak in the next data breach, no stored credential to rotate when a card expires, and no friction-laden 3DS challenge on every renewal. The payment is authorised inside the banking app the customer already uses for everything else, with the bank's own biometrics, and the money moves in seconds with a notification to match.

None of this means cards are going away. Cards still own travel, cross-border, rewards, and the long tail of small-ticket commerce. But the question merchants should be asking in 2026 is no longer "is open banking real yet" — it is "which parts of my payment mix should already be running on it." For most businesses with high-ticket transactions, recurring billing, or meaningful payout volume, the honest answer is: more than you think.