Open Banking Consent Scam

In this scam, a fake app or service asks you to connect your bank via open banking for a 'budget', 'refund', or 'loan check', then uses the granted access to view your data or initiate payments.

Quick verdict

Risk level
High risk
Scam type
Account access consent fraud
Main red flag
An app or service asking you to connect your bank to access a refund, loan, or tool.
What to do first
Only grant open banking access to apps you fully trust and have verified.

Understanding this scam

In this scam, a fake app or service asks you to connect your bank via open banking for a 'budget', 'refund', or 'loan check', then uses the granted access to view your data or initiate payments.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

If you take one thing from this guide, make it this: An app or service asking you to connect your bank to access a refund, loan, or tool. Only grant open banking access to apps you fully trust and have verified.

If your message looks slightly different, check the Fake Banking App Scam or the Loan App Scam, both are close cousins of this pattern. Every related guide lives in the Bank & Payment Scams guides, and the scam checker can scan the text you received.

A typical example

Example pattern, not a real report
Example pattern: 'Connect your bank to claim your refund / check your loan eligibility instantly.' The consent grants access a scammer misuses.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

The tell here: An app or service asking you to connect your bank to access a refund, loan, or tool.

What the data shows

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

Warning signs

  • A request to connect your bank to an unfamiliar app
  • Access sought to claim a refund or 'check' something
  • An app you cannot verify as regulated
  • Pressure to connect quickly
  • Broad permissions including initiating payments

Your safest response

  • Only grant open banking access to verified, regulated apps you trust
  • Review and revoke account access you do not recognise in your banking app
  • Be cautious of refund or loan lures asking for bank access
  • Report suspicious apps to your bank and regulator

If you have already engaged

  • Revoke the app's access in your banking app immediately
  • Change your online banking password from a trusted device
  • Review transactions and report anything unfamiliar
  • Contact your bank if payments were initiated

What to avoid

  • Do not connect your bank to unverified apps
  • Do not grant access to claim a refund or prize
  • Do not ignore unfamiliar connected apps

You might also see

Questions people ask

What is open banking consent fraud?
Scammers trick you into granting an app access to your bank via open banking, then misuse that access to view data or initiate payments. Only connect trusted, regulated apps.
How do I check what has access?
Review connected apps and open banking permissions in your banking app, and revoke anything you do not recognise.
I connected a suspicious app. What now?
Revoke its access immediately, change your banking password from a trusted device, review transactions, and contact your bank.
Is open banking itself safe?
Used with regulated, trusted apps, yes. The risk is granting access to a malicious or unverified app, so verify before connecting.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.