top | item 45299738

(no title)

syllogism | 5 months ago

In Europe there are legitimate and extremely established services that require you to input your bank login details into something other than your bank's website. It's madness.

discuss

order

dtech|5 months ago

There's no legitimate case for that since PSD2 (mandatory since 2020). Are you not confused by that? PSD2 doesn't share your credentials.

I'm an European and have never needed to use nor encountered those services.

siva7|5 months ago

PSD2 is just MFA, it doesn't prevent shady companies still asking your login credentials, even if you must authorize that login from your official banking app. Klarna is one of many examples - they ask me for my bank credentials on their own website so they can crawl all my finance data .

dcminter|5 months ago

Where a bank doesn't offer compliant APIs, screen-scraping integrations are explicitly allowed. Not sure how common that is at this point.

fancyfredbot|5 months ago

Care to mention what these legitimate and established services are?

JLCarveth|5 months ago

Plaid is used by a lot of the major Canadian banks.

joshuaissac|5 months ago

Sofort used to do this. I don't know if they still do.

didsomeonesay|5 months ago

Name and shame: Klarna did this.

Not sure if they still do because i stay well clear of them.

BlindEyeHalo|5 months ago

I find this hard to believe and have never seen that ever.

jeltz|5 months ago

It used to be common 5 years ago before PSD2.

brettermeier|5 months ago

Don't understand the downvotes, i never saw that too, and i am shopping online very often.

BrandoElFollito|5 months ago

Are you talking about the possibility to pay via your bank account directly on a checkout page? If so this is the bank page you are using.

Can you give some examples?

bombcar|5 months ago

Multiple US hospitals and insurance companies use genuine links like doctor-services-for-u.biz - infuriating.

PeterStuer|5 months ago

Are you sure? Never seen any such thing.

jeltz|5 months ago

It used to be common before PSD2 but I have personally not seen it for some years.