Open Banking: how do consents and transaction retrievals work?

UK Help
1

I am a customer, not a regulated AISP.

I’ve tried to get an answer about some of this from Monzo customer support, with very little success.

I am having some issues with an AISP/AIS agent syncing data from my Monzo Business account (some transactions are missing). I suspect it’s probably the AISP’s fault - and have asked them to raise an OBIE service desk ticket about the problems they are having issues with Monzo’s implementation - but I want to get an understanding of:

  • The account access consent I have actually granted to the AISP - more specifically, what is the TransactionFromDateTime and TransactionToDateTime set (if populated at all)?
    • There appears to be very little shown in the app about active consents and what the service providers actually have the ability to do. About the only thing you can do is remove access.
  • Monzo support have told me that AISPs can’t view transactions prior to the point at which Open Banking account access is set-up. I think this may well be nonsense. Am I correct?

image
image1080×1490 173 KB

  • Are there any limits set by Monzo on the timeframe an AISP is allowed to look back, in terms of transactions? E.g. would 8 months back be too far?
    • I couldn’t immediately see any documented limits on the response size for Monzo’s implementation of the OB Transactions endpoint - is it possible for the requests to timeout? Are AISPs expected/required to use fromBookingDateTime / toBookingDateTime in order to paginate when retrieving transactions?

Any input would be gratefully received!

2

I think you are correct, these are often used to perform income verification checks (I think Yonder does this), which would be impossible if they couldn’t see any data before the current date of connection

1 Like
3

Oh, of course - I’d forgotten about those sorts of use-cases - so it simply cannot be the case that there’s any sort of restriction in this way.

Despite requesting that it be treated as a complaint, Monzo still seem to be doubling down on this response though, which doesn’t make any sense to me.

4

When the connection is setup, you provide permissions to access data no older than X days. This depends on what’s asked for, 30/90/365/730 all seem to be common values.

Once the connection is setup, to change this value you’d need to create a new one with different settings

1 Like
5

Thanks, this is useful - so really, Monzo’s COps should have been able to tell me what I had selected/what the service provider had used at the time of setting up the connection.

I’ve moved this out of the Developers section and back to where I put it in the first place because it’s a question as an end-user.

6

I’m not sure whether that’s actually information that would be surfaced in our internal tooling, so they may not be aware of that.

1 Like
7

I mean this in the nicest way, but c’mon. It’s basic information about the consent. Why on earth wouldn’t it be exposed to COps (and indeed, why on earth isn’t it exposed to the end-user when it determines what the 3rd party can see?)

I’m still waiting for a response on this from Monzo, and the AISP is continuing to give me the runaround. Really frustrating.

8

TBH I’m surprised it’s not exposed in the app, many other banking apps do, and it’d reduce the need for human intervention

1 Like