Emma Feedback Thread / Q&A

It kicks you out of the Monzo app too? This seems really odd. I thought the APIs would be independent of each other.

Though am am also waiting for them to get back to me.

I guess at least you know it really is kicking everyone out who has access!

1 Like

Out of interest - What is the big concern here? Is it just to be extra careful? Or is there legitimately something Emma can do which you are worried about?

I signed up to Emma… But I haven’t used it since adding my accounts.

No specific concern and definitely not for how Monzo is integrated. I just don’t feel 100% comfortable with how Amex is integrated (I believe in only giving credentials to the credential keeper). And since that meant it wasn’t useful to me, best practice was to revoke permissions (basic common sense… Keep unnecessary permissions to a minimum)

3 Likes

Isn’t this the main problem with Open Banking then? How many big banks will create an email login like Monzo use? I stand to be corrected, but must banks will expect you to use your login credentials for Open Banking. Maybe they’ll allow authorisation through the banks website.

Using your credentials is just fine but they should go to the bank’s site not to a third party.

2 Likes

That was my understanding of how open banking will work - the app will redirect you to your bank where you will log in, who will then authorise the app via Oauth 2.

The problem with this being that embedded browsers in apps often don’t show the URL you are on and it will become commonplace to be redirected to a login screen where you input your credentials. Phishing ahoy!

3 Likes

:smiley:

5 Likes

Hum… I’m not convinced - as it currently stands if it emerge there was an issue, I’d have to contact monzo customer service and get them to revoke access. Now let’s say it’s a big issue, customer service might be overwhelmed. I think I need the ability to revoke API access directly from the app in the same way I can for Google services.

Truelayer’s TOS is also not great - ‘if anything goes wrong LULZ - nothing to do with us’.

4 Likes

If anyone is interested in joining the queue for Emma can I suggest you use my referal link to jump me in the queue! :wink:

OK,

Because Monzo provides you no easy way to revoke access, I was told on another thread, the way to do it is contact monzo and they will do it for you.

I contact monzo and they told me… we have no way to do this!

I find this astonishing, as it stands if Emma is compromised, you have absolutely no way to disconnect their access and it appears neither does Monzo.

1 Like

They absolutely can. It’s a bit messy but it can be done. It revokes all API access including the first party app. Chat back and ask for it to be escalated to TechSpecs (Technical Specialists).

I do agree there should be something far more granular and user facing. I think it’s coming tho, :slight_smile:

4 Likes

It shouldn’t be coming - a user shouldn’t have to rely on a community forum or hope they stumble across the right CS rep in chat. This is amateurish.

2 Likes

Actually the more i think about it - none of this seems compliant anyway - how do I access this information from Monzo?

  1. The name of the TPP that requested the consent
  2. The status of the authorisation e.g. Active/Inactive
  3. The data that was requested
  4. When the TPP’s access to the data will expire
  5. The date the authorisation was granted
    The PSU should then have the option to revoke that authorisation.

This shouldn’t have been launched without a dashboard.

2 Likes

Have to agree. It took all day to get mine revoked as CS didn’t know. It was escalated to a technical specialist and I was told it was revoked. A little sceptical though as unlike @GalaxyMergirl I have not been kicked out of the Monzo app to reauth :frowning:

2 Likes

The problem is also the other way - So I go and revert the access in the third party app (in this case emma) - how do I know this has actually happened without having to contact customer services?

3 Likes

Here’s what Monzo have said about revoking 3rd party app’s access -

if you have any more concerns about this process, could you please post them in either of those topics, as this is not something that Emma controls & it applies to all 3rd party access, not just Emma’s.

2 Likes

A post was merged into an existing topic: Tracking API access?

Monzo access has just moved emma from my 4th page of finance apps to the first page!

good stuff!

1 Like

I have a Virgin Money credit card, and that’s my only other active account (apart from savings) which I would love to have view of in Emma.

@edo1493 :+1:

oops wrong tag before :speak_no_evil: .