Payments Training Hub

API Banking and Open Banking

D10 APIs and integration · 9 lessons

Version 1.0 | Last reviewed 2026-11-05

Learner explains API banking and open banking, including consent, authentication, and third-party access, and writes API requirements for a payment initiation use case. Learner demonstrates this skill using realistic banking examples, explaining each step clearly and using correct terminology throughout.

API banking and open banking: REST APIs, ISO 20022 APIs, PSD2, API security, webhooks and payment initiation.

What You Can Do After This Chapter

Learning objective. Learner explains API banking and open banking, including consent, authentication, and third-party access, and writes API requirements for a payment initiation use case. Learner demonstrates this skill using realistic banking examples, explaining each step clearly and using correct terminology throughout.

Practical assessment. Learner writes functional requirements for an API that lets a third-party app initiate a 300 euro payment with customer consent, covering authentication, consent scope, idempotency, and error handling. Learner then draws the consent flow from app request to bank approval, and lists five error cases with the correct HTTP status and customer message for each. Learner submits the work with all calculations, sources, and assumptions stated clearly, and checks the result against the chapter checklist before final submission.

Expected deliverables.

Completion criterion. Learner covers consent, authentication, idempotency, and errors in the requirements, draws the consent flow correctly, and assigns the right status to each error. Completion is judged on accuracy, completeness, and clear reasoning throughout the submitted work.

In this chapter
  1. From Files and SWIFT to Real Time APIs
  2. REST APIs for Payments
  3. ISO 20022 APIs
  4. PSD2 and Open Banking
  5. Customer authentication: MFA, SCA and step-up
  6. Webhooks and Event Driven Payments
  7. Payment Initiation and the Developer Experience
  8. System design deep dive: payment APIs at scale
  9. System authentication: OAuth2 grants, scopes, tokens and certificates

Start Lesson 1: From Files and SWIFT to Real Time APIs →