Hacker News new | ask | show | jobs
by iknowstuff 1508 days ago
Which banks have OAuth APIs? I would love to switch to one of those instead of exposing my password due to my bank's incompetence.
8 comments

WellsFargo has some form of OAuth (https://developer.wellsfargo.com/). I know that YNAB (https://www.youneedabudget.com/) uses it.
I use Bunq here in the NL. I wish all banks would steal their APIs. The abilities I have as a dev are simply amazing.

https://doc.bunq.com/

Bunq seems like a… suboptimal bank, though. They cost ~5x more than other NL banks, and by all accounts, their customer support is streets behind.

Their API and app-centric approach seem to be the only upshots, and even then, other banks have relatively good apps these days.

I am a very happy Bunq customer for 4+ years, and as a user of other Dutch banks (for a mortgage - ABN amro, in the past UK banks like FD), their overall service levels great - if I chat via the app I have always been helped quickly, flexibility with accounts, cards, automation via the APIs etc is absolutely worth the price hike. These are things I am happy to pay a few extra cups of coffee a month for as they make my life with an extended family much easier to manage day to day.
Good service levels will be a real USP, I expect. In the Netherlands where physical banks are a dying breed (especially those that deal with money. Aforementioned ABN Amro doesn't let you change a 100 Euro bill into 2 fifty bills, for instance). Especially the elderly are lost in the digital world and need guidance. For my parents for instance, every website is like a completely different app they need to learn how to use and with layouts changing all the time this is an enormous struggle to them.

I hate the fact that physical banks (and cash) are disappearing. I don't have complicated needs as to the digital services I consume, same as many other people. Then online banks become indistinguishable from the next, and it is ability to contact real people that sets them apart.

The cost-cutting wrt physical bank branches is just ridiculous. You can't even deposit or withdraw coinage at ABN AMRO branches anymore; they outsourced that to home improvement stores instead (yes, really).
Yes, I experienced that too. Acted surprised and look at me exasperated and what seemed with slight disgust when I came with actual cash to their office. "We don't deal with money, sir".

The situation with cash is overall very bad. Try to pay with a 100 Euro note in smaller cities. Almost no one will accept it, including banks. I regularly see very frustated tourists who with cash in hand are left out in the cold.

Capital One does, but for some reason the connection process breaks if I have an ad blocker enabled even if I whitelist their domain.

Chase does at least for credit cards.

Betterment has app passwords, which is better than using your full password.

Really happy Betterment implemented this. Hoping they’ll soon have some actions based Auth as well.
Unfortunately I did something wrong with a Betterment connection last week that caused them to lock my account for hacking attempts, until I call them, and their EST support hours are only in times I'm in meetings in PST so far…

but at least I don't use their checking feature, which they're oddly excited about despite it having no advantage over other banks and no possible way it ever could have an advantage.

I got blocked as fraudulent and banned before I could even transfer my savings in to Betterment. (No problems with Wealthfront, and now a happyish customer).
Different aggregators will have different connections established based on relationships and also the priority of the bank. I've seen a ton of different options based on the fintechs apps I use from Plaid, MX, Finicity, etc. Long story short, it's usually the big banks. Different aggregators have different priorities around the amount of traffic they send over these connections though. Candidly I don't know why that is, but I have some hypotheses. Ultimately though you can assume all of the above names will have accounts like Chase, Wells, Citi, Cap One, BOA, US Bank etc.
MX and Finicity both have OAuths to like 80+% of the top 20 financial institutions. There's a reason Plaid doesn't want people switching to them and it's hella sus
I believe Plaid was the one who got JPMorgan to build an OAuth API in the first place: https://finovate.com/plaid-signs-open-banking-agreement-with...

Why can’t the reason be “losing their only source of revenue to a competitor”? That seems like a fine reason to not want people to switch

Edit: cannot assure, but rumor on the street from peers, they were not the ones to get Chase to build OAuth.

PR is a hell of a marketing tactic.

Plaid used oauth for Bank of America circa 2019 when I tried, and currently uses Capital One's oauth when I try to log into it. I'm sure they use it when it's convenience (or maybe when the financial institution mandates it).
I know that Charles Schwab has some sort of OAuth flow which I used when connecting my account to TurboTax this year.
So, I got very excited about this, but it seems that banks are expecting "bank integrator" aka companies, and not giving access to end users :( If any knows of a bank that has API access in the US do share!
You might find luck using companies targeting algo trading. A lot of companies allow use of the account more like a checking account (eg interactive brokers). They have an API and also allow different logins to have different authorizations.
Mercury Bank has nice, friendly APIs. I believe they only do business bank accounts, though.

But I think I remember seeing that some of Capital One's bank account offerings have some customer facing apis.

chase has an OAuth flow but not every integration uses it.
Capital One
they deserve a lot of credit for how early they built this and made it relatively broadly available!