Open banking has moved well past the proof-of-concept stage in regulated iGaming markets. For operators who have already integrated a basic pay-by-bank option, the more pressing questions now concern settlement architecture, regulatory positioning, chargeback exposure and the specific ways open banking data can sharpen responsible gambling controls. This article works through each of those layers in operational terms.
Why Open Banking Is Structurally Different for Gambling
Standard card payments route through card schemes, acquiring banks and issuing banks, each of which can independently block or flag a gambling merchant code. Open banking bypasses that chain. A payment instruction travels directly from the player's bank account, authenticated through the player's own banking app, to the operator's designated receiving account. There is no card scheme in the middle, no merchant category code exposure and no chargeback mechanism in the traditional sense. That changes the risk profile in both directions: operators gain certainty on received funds, but they also absorb the dispute resolution burden directly rather than delegating it to an acquirer.
Settlement Speed and Liquidity Implications
In markets operating on real-time gross settlement infrastructure, such as the UK's Faster Payments network or SEPA Instant in the eurozone, open banking deposits can credit player wallets in under ten seconds. Withdrawals processed through the same rails follow the same timeline, which is a meaningful competitive differentiator against card withdrawals that routinely take one to three business days.
The liquidity implication is equally significant. When settlement is near-instant in both directions, the float that operators traditionally held as a buffer between incoming deposits and outgoing withdrawals shrinks considerably. Treasury teams need to model cash flow against peak withdrawal windows, particularly around major sporting events, and ensure receiving accounts carry sufficient headroom. Operators running multiple brands across a single payment infrastructure layer should consolidate this modelling rather than managing each brand in isolation.
Regulatory Positioning Across Key Markets
Regulators in the UK, Netherlands, Sweden and Malta have each addressed open banking in gambling to varying degrees, but none has yet produced a unified framework that maps cleanly onto the Payment Services Directive 2 (PSD2) permission structure. Operators should confirm with their payment service provider whether the AISP (Account Information Service Provider) and PISP (Payment Initiation Service Provider) licences covering their integration are in good standing, and whether the provider maintains passporting rights for each jurisdiction where the operator holds a licence.
A recurring compliance gap involves the use of account information data. Pulling a player's transaction history for affordability checks is permitted under PSD2 with the player's explicit consent, but the consent capture flow must be specific about purpose. Bundling affordability consent into a general terms acceptance screen has drawn regulatory scrutiny in at least two European markets in the past twelve months.
Using Account Data for Responsible Gambling Controls
This is where open banking moves from a payments tool to an operational asset. With a valid AISP connection and appropriate player consent, an operator can observe:
- Salary or regular income credits, which anchor affordability estimates to real data rather than self-declaration
- Patterns of multiple small deposits at irregular hours, which correlate with escalating play behaviour
- Presence of debt repayment transactions or payday lending credits, which are recognised markers of financial stress
- Transfers to other gambling operators, which can inform a more accurate picture of total gambling spend
Operators using this data must document the decisioning logic, maintain audit trails and ensure the data is not retained beyond the period necessary for the specific compliance purpose. This is not optional; it is a condition of lawful processing under GDPR and, in the UK, under FCA and UKGC guidance on consumer data.
Fraud and Risk Controls Specific to Open Banking
The absence of a chargeback mechanism does not mean open banking is fraud-free. The primary vectors shift rather than disappear:
- Authorised push payment (APP) fraud: A player may be manipulated into initiating a deposit under false pretences. Operators need to assess whether their terms address this scenario and whether their liability exposure differs from card-based disputes.
- Account takeover at the bank layer: If a player's banking credentials are compromised, the fraudster can initiate deposits to any linked merchant, including the operator's account. Monitoring for unusual deposit frequency or amounts per session remains a necessary control.
- Money laundering via round-tripping: Open banking's direct bank-to-operator path makes it attractive for layering. Operators should apply the same transaction monitoring rules to open banking deposits as to any other payment method and should not assume that bank-authenticated payments carry an implicit AML clearance.
Vendor Selection and Integration Maturity
The open banking aggregator market has consolidated noticeably over the past two years. Operators evaluating providers should look beyond the API quality and assess the provider's own regulatory standing, their coverage of the specific banks where the operator's player base banks, their SLA commitments on uptime during peak event windows and whether they offer a sandbox environment that mirrors production bank behaviour accurately.
A payment integration that works in testing but degrades during a weekend football schedule is not a stable foundation for a deposit experience that players will trust over cards.
Operators who treat open banking as a secondary deposit option will consistently underperform those who engineer it as a primary rail with card as a fallback. Player habituation to a smoother, faster flow drives long-term payment preference, and payment preference affects retention at a structural level.
