Open Banking API SCA restrictions update

On 10 February 2025, we'll add the /accounts endpoint to the list of SCA-exempt endpoints.

As a reminder

On 18 November 2024, we introduced restrictions which limited access to several Account Information Service (AIS) endpoints to 5 minutes after obtaining the user’s Strong Customer Authentication (SCA), with the /balances and /transactions sub-endpoints exempt from those restrictions.

What's changing?

We have taken your feedback into account and reassessed these restrictions. As a result, on 10 February 2025, we'll add the /accounts endpoint to the list of SCA-exempt endpoints.

This means that as of 10 February, the following endpoints will be accessible beyond the 5-minute window after SCA:

Note that this change will affect both new and existing consents.