High riskBank & Payment Scams

Open Banking Consent Scam

In this scam, a fake app or service asks you to connect your bank via open banking for a 'budget', 'refund', or 'loan check', then uses the granted access to view your data or initiate payments.

Quick verdict

Risk level
High risk
Scam type
Account access consent fraud
Main red flag
An app or service asking you to connect your bank to access a refund, loan, or tool.
What to do first
Only grant open banking access to apps you fully trust and have verified.

What this scam usually looks like

In this scam, a fake app or service asks you to connect your bank via open banking for a 'budget', 'refund', or 'loan check', then uses the granted access to view your data or initiate payments.

Example message pattern

Example pattern — not a real report
Example pattern: 'Connect your bank to claim your refund / check your loan eligibility instantly.' The consent grants access a scammer misuses.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A request to connect your bank to an unfamiliar app
  • Access sought to claim a refund or 'check' something
  • An app you cannot verify as regulated
  • Pressure to connect quickly
  • Broad permissions including initiating payments

What to do

  • Only grant open banking access to verified, regulated apps you trust
  • Review and revoke account access you do not recognise in your banking app
  • Be cautious of refund or loan lures asking for bank access
  • Report suspicious apps to your bank and regulator

If you already clicked or replied

  • Revoke the app's access in your banking app immediately
  • Change your online banking password from a trusted device
  • Review transactions and report anything unfamiliar
  • Contact your bank if payments were initiated

What not to do

  • Do not connect your bank to unverified apps
  • Do not grant access to claim a refund or prize
  • Do not ignore unfamiliar connected apps

Similar scams

Frequently asked questions

What is open banking consent fraud?
Scammers trick you into granting an app access to your bank via open banking, then misuse that access to view data or initiate payments. Only connect trusted, regulated apps.
How do I check what has access?
Review connected apps and open banking permissions in your banking app, and revoke anything you do not recognise.
I connected a suspicious app. What now?
Revoke its access immediately, change your banking password from a trusted device, review transactions, and contact your bank.
Is open banking itself safe?
Used with regulated, trusted apps, yes. The risk is granting access to a malicious or unverified app, so verify before connecting.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.