The quiet that surrounded open banking in Ukraine just a year ago finally ended this week. According to Minfin, on 5 August 2026 Oschadbank, OTP Bank and Sense Bank officially announced their connection to the Open Banking ecosystem, meeting the National Bank of Ukraine's requirement to implement open application programming interfaces (APIs) by 1 August 2026. All three used the ready-made API KIT solution from Open API Hub Ukraine — Sense Bank launched it back on 28 July, while Oschadbank and OTP Bank made it in time for the 1 August deadline. Crédit Agricole, market participants say, is expected to join the same group shortly. This is no longer a pilot project or a statement of intent — these are working APIs through which licensed financial companies can, in practice, obtain account data and initiate payments with a customer's consent.
What actually changed on 1 August
Ukraine's open banking model follows a logic very similar to the European PSD2 directive and defines two roles for third-party financial services. The first is AISP — a provider that aggregates information from your various accounts, even across different banks, and displays it in a single app, for example for personal financial planning. The second is PISP — a provider capable of initiating a payment directly from an account, without issuing a card and without switching to the bank's own app. Until now, real access through such APIs in Ukraine was mostly held by Privatbank, monobank and a handful of other banks that built their own interfaces — together, by market estimates, covering more than 80% of the country's active cards. Now three more major players have joined the club of banks with working open APIs, and together with Crédit Agricole, effectively the entire top of the Ukrainian market will be technically ready to let third-party services into its customers' accounts.
It is important to understand that this is not some new product the bank is selling you, but an infrastructure change. Oschadbank, OTP and Sense Bank have not launched a new customer service in the usual sense — they have opened technical "doors" that third parties can use with your explicit consent: expense-tracking fintech apps, instant-transfer services, and credit brokers that can automatically analyse your real income instead of asking for a certificate from your employer's accounting department. Put simply, the bank remains the vault for your money, but it stops being the sole party deciding how that data can be used.
What this means in practice for customers
The most noticeable effect of open banking for an ordinary person is not the mere existence of the API, but the services that will gradually appear on top of it. In the near term, expect more aggregator apps that show all your accounts — at Oschadbank, OTP, Sense Bank or any other connected bank — on a single screen, without having to log into each app separately. That might sound trivial to some, but for people with accounts at two or three banks — and there are plenty of them in Ukraine, with a salary card at one bank, a loan at another, and savings at a third — it is a real time saver and a clearer picture of their overall financial position.
The second practical consequence is that comparing offers and switching providers gets easier. When a fintech service or a credit broker can see a customer's real history of income and spending with their consent, it becomes easier for it to offer relevant terms without the usual paperwork. This is already noticeable in the lending market and is likely to gradually spread across the whole range of banking products. But that is no reason to blindly trust the first app promising "the best terms": the sensible strategy stays the same — check offers independently against an unbiased source. Before taking out a new loan or opening a deposit, for instance, it is worth comparing terms across several banks rather than relying solely on whatever an aggregator suggests first.
The third consequence is intensifying competition among the banks themselves. When it becomes technically easier for a customer to see and compare terms across institutions in one window, banks find it harder to retain customers through sheer inertia — "I've banked here for ten years, why bother switching." That could push players to revise the terms on current accounts and savings products more aggressively so as not to lose market share — though how quickly that turns into genuinely better terms for customers remains to be seen.
What about the risks
The main worry that naturally comes to any customer's mind is: does this mean my banking data will be less secure? The short answer is that the architecture of open banking is built specifically to minimise that risk — but the human factor remains, and that is exactly what deserves attention. Access to an account through the API can only be granted to licensed payment institutions supervised by the National Bank — not to just any app from Google Play. Access is granted for a specific purpose, for a limited period, and can be revoked by the customer at any time, rather than being a one-off "forever" grant. Data is transmitted through secure channels, not in the form of internet-banking passwords, which some dubious services used to ask customers to type in directly — that practice was precisely the main vulnerability before official Open Banking existed.
Still, new infrastructure means a new surface for fraud, and market experts largely agree on this point: the main danger in the coming months is not a breach of the API itself, but attempts to pass off a fraudulent app as a legitimate participant in the open banking ecosystem. If an app posing as a "financial aggregator" asks you to authorise through a fake pop-up window instead of your bank's genuine page, that is a classic phishing scheme wearing a new, more convincing disguise now that Open Banking exists. The basic rule therefore stays unchanged: authorising access always happens through your bank's own official app or website, never through a third-party form that asks you to type your internet-banking login and password directly. If anyone asks for those details outside your bank's own page, that is not open banking — it is classic phishing under a new guise.
What to do about it now
For customers of Oschadbank, OTP or Sense Bank, the news essentially means one thing: you now have a technical option you can use or ignore — nobody is forcing anything open. If you are not yet using aggregators or fintech services, the practical takeaway for now is to pay closer attention to exactly whom you grant account access to, and to check whether a given service appears on the National Bank's list of licensed payment service providers. If you are an active customer of several banks at once, the arrival of working APIs at three more major players is a good reason to review whether it makes sense to consolidate some products — or, conversely, to use the new transparency to find better terms elsewhere. Either way, it is worth regularly checking current offers: you can compare current accounts, savings accounts, loans and deposits across banks on BankSorter, rather than relying solely on whatever the first fintech app happens to suggest.
Open banking in Ukraine is moving from concept to daily practice — slowly, bank by bank, but steadily. The coming months will show how quickly real services emerge to take advantage of the new possibilities, and how responsibly the market handles the security question. For now, the main takeaway for customers is simple: you have more control over your own financial data than ever before — and it is you who decides who gets access to it, and for how long.