The regulator creates the obligation. The lender carries the risk. The bank controls the access.
In a recent chat with a client — an online lender — we got talking about bank APIs, screen scraping, and what happened when Capitec withdrew access to consumer transaction data. For years, most of their applicants shared transaction data straight from the bank. Verified at source, nothing to manipulate — fraud on that channel […]