Standards/open-banking-qr
Open Banking QR
Overview
Open Banking QR is the UK's bank-redirect QR-code payment pattern enabled by the UK Open Banking initiative — pioneered by CMA-mandated APIs for the CMA9 banks (Barclays, HSBC, Lloyds, Nationwide, NatWest, RBS, Santander, Bank of Ireland, Halifax) under the Competition and Markets Authority's 2017 PSD2-implementation mandate [1, 2, [uk-cro]]. Open Banking QR is structurally an enabling pattern (Payment Initiation Service via PSD2) rather than a single product — multiple UK-fintech-and-bank products implement QR-based Open Banking payments: lloyds-link-pay, Atoa, Vibepay, Stored, and many others.
The structural significance: Open Banking QR represents the UK's response to Visa/Mastercard interchange-fee dominance — bank-redirect-payment via QR avoids card-network interchange fees, offering merchants lower MDR. Variable Recurring Payments (VRPs) — an Open Banking extension launched as CMA-mandated for CMA9 banks — extends Open Banking into recurring-payment scenarios competing with traditional Direct Debit. 2026 marked an important shift: open-banking payment options launched on Amazon and eBay UK — illustrating mainstream adoption of bank-redirect-payment-via-QR. The structural progression: PSD2 mandate (2015) → UK Open Banking (2018) → Open Banking QR products + VRPs (2020+) → mainstream e-commerce adoption (2026).
History
Background — UK Open Banking UK:
- PSD2 (Payment Services Directive 2) — EU regulation 2015.
- UK Open Banking — CMA mandate effective 2018.
- CMA9 banks required to expose APIs.
2018 — UK Open Banking takes effect [1]:
- CMA9 banks expose APIs.
- Foundation for bank-redirect-payment products.
Subsequent fintech product launches [2]:
- Atoa, Vibepay, Stored, lloyds-link-pay, others.
- QR-based Open Banking payments at retail.
Variable Recurring Payments (VRPs) [2]:
- CMA-mandated for CMA9 banks.
- Recurring-payment instruction enabling subscription billing.
2026 — Amazon + eBay UK launch Open Banking payments [3]:
- Mainstream e-commerce adoption.
- Major shift from early-adopter to mainstream.
Technical specification
Open Banking QR is the UK PSD2-PIS-enabled bank-redirect-payment pattern with QR-code interface [1, 2]:
| Layer | Description |
|---|---|
| Regulatory framework | PSD2 (EU) + UK Open Banking (CMA mandate, 2018) |
| Mandated banks | CMA9 (Barclays, HSBC, Lloyds, Nationwide, NatWest, RBS, Santander, Bank of Ireland, Halifax) |
| Underlying rail | UK Faster Payments |
| Settlement | Instant via Faster Payments |
| Currency | GBP |
| Authentication | Customer authenticates in own bank app (SCA) |
| VRP extension | Variable Recurring Payments — recurring authorisation |
| Mainstream adoption | Amazon + eBay (2026) |
Flow [2]:
- Customer scans merchant QR at checkout.
- Redirected to own bank app.
- Authenticate (biometric/PIN).
- Funds transfer via Faster Payments.
- Merchant receives instantly.
No card interchange [1]:
- Bank-to-bank direct — no Visa/Mastercard intermediation.
- Lower MDR for merchants.
Use cases
Merchant checkout (in-store + online) [2]: Cardinal use.
Subscription billing via VRPs [2]: Recurring-authorisation Direct-Debit-competitor.
Charity donations [1]: Bank-redirect-payment for fundraising.
Bill payment [1]: Utility, government services.
Amazon + eBay UK checkout [3]: Mainstream e-commerce adoption.
B2B payments [2]: Lower-cost alternative to cards.
Implementations & ecosystem
Regulatory framework: PSD2 + UK Open Banking (CMA mandate).
CMA9 banks: Barclays, HSBC, Lloyds, Nationwide, NatWest, RBS, Santander, Bank of Ireland, Halifax.
Major UK Open Banking QR fintechs:
- lloyds-link-pay + Lloyds PayFrom Bank.
- Atoa.
- Vibepay.
- Stored.
- Volt.
- TrueLayer, Yapily, Plaid (Open Banking infrastructure providers).
Major recent adoption: Amazon + eBay (UK 2026).
Fun facts
- PSD2 (2015) → UK Open Banking (2018) → mainstream Amazon+eBay (2026): 11-year arc to mainstream consumer adoption.
- CMA9 banks: 9 largest UK banks mandated to expose APIs — structurally distinctive.
- No card interchange: Bank-to-bank direct via Faster Payments avoids Visa/Mastercard fees — economic disruption.
- VRPs: Variable Recurring Payments — Open Banking's answer to Direct Debit + subscription economy.
- UK Faster Payments underlying: Foundation rail beneath Open Banking payments.
- 2026 mainstream e-commerce adoption (Amazon + eBay): Significant inflection point — moving from fintech-niche to mainstream.
- Atoa, Vibepay, Stored: Vibrant UK Open Banking-fintech ecosystem.
- Mastercard + Lloyds Open Banking partnership: Even card networks integrating Open Banking-payment alternatives.
Comparison
| Feature | UK Open Banking QR | ideal-qr (NL) | eps (AT) | bizum-qr (ES, CPM) | giropay (DE) |
|---|---|---|---|---|---|
| Regulatory origin | PSD2 + CMA mandate | Pre-PSD2 (NL banks) | Pre-PSD2 (AT banks + gov) | Pre-PSD2 (ES banks) | Pre-PSD2 (DE banks) |
| Country | UK | Netherlands | Austria | Spain | Germany |
| Underlying rail | UK Faster Payments | iDEAL / SEPA | EPS / SEPA | Iberpay SCT Inst | giropay / SEPA |
| Multi-product ecosystem | Yes (Atoa, Vibepay, Stored, Lloyds, etc.) | iDEAL single | EPS single | Bizum single | giropay single |
| VRPs / recurring | Yes (VRPs CMA-mandated) | iDEAL Recurring | Limited | Limited | Limited |
Status
Active, mainstreaming [1, 2, 3]:
- PSD2 + UK Open Banking regulatory framework.
- CMA9 banks + 100+ smaller participating institutions.
- Multiple fintech products: Atoa, Vibepay, Stored, Lloyds Link Pay/PayFrom Bank, others.
- VRPs extension.
- Amazon + eBay 2026 mainstream adoption.
Sources
- 1 Open Banking — official
- 2 VRPs — Open Banking
- 3 Pay by Bank big step forward — Open Banking
- [uk-cro]
reports/countries/GB-united-kingdom.md
Deployments
Found in the following country reports (grep across reports/countries/):
- GB — GB-united-kingdom.md
- LT — LT-lithuania.md