Open Banking for Landlords: What It Is and Why It Matters

Open Banking lets you securely share your bank transaction data with authorised apps — read-only, regulated by the FCA, with cryptographic guarantees the app can never initiate a payment without your explicit consent. For UK landlords managing one to fifty properties, it removes the single most time-consuming admin job: matching rent payments back to tenants and tagging outgoings to the right tax category. This guide walks through what Open Banking actually is, how the security model works, what changes when you wire it into your landlord workflow, and the realistic limits.

What Open Banking actually is

Open Banking is a UK regulatory framework launched in 2018 under the Competition and Markets Authority (CMA) order on the nine largest UK banks (the "CMA9"). It mandated those banks to expose two categories of API to FCA-authorised third parties:

• Account Information Services (AIS) — read-only access to account details, balances, and transaction history. This is the API that powers landlord rent matching, accounting tools, mortgage affordability checks, and budgeting apps.
• Payment Initiation Services (PIS) — the ability to initiate a payment on the user's behalf, with explicit authorisation per transaction. This is what powers Pay-by-Bank checkouts and recurring rent collection (variable recurring payments / VRP).

Both categories require the third party to be authorised by the Financial Conduct Authority (FCA) as either an Account Information Service Provider (AISP) or Payment Initiation Service Provider (PISP), and to renew that authorisation annually. The FCA's register at register.fca.org.uk shows every authorised firm — verify before connecting any tool to your bank.

How the security model works in practice

The 2007 Payment Services Directive (PSD2) introduced Strong Customer Authentication (SCA), and Open Banking inherits it. The flow looks like this when you connect a bank account to a landlord tool:

1. You select your bank inside the tool.
2. You're redirected to your bank's own authentication system (banking app, web sign-in, or biometric).
3. Your bank shows you exactly what you're authorising — typically read-access to specified accounts for a 90-day window.
4. You confirm in the bank's UI. The third party never sees your password.
5. Your bank issues a short-lived token to the third party. That token can only do what you authorised.
6. Every 90 days you re-authenticate. Until 2024 this had to happen via the redirect dance again; under PSD3 (which the UK is mirroring through HM Treasury) the cadence is being relaxed for low-risk read-only AIS access, but the underlying safeguard remains.

Three things follow from this:

• The third party never has your banking credentials. Pre-Open Banking "screen scraping" tools used to ask for your username + password and log in as you. That model is now banned for FCA-regulated work.
• You can revoke access at any time from your bank's app — usually under "third-party access" or similar. Revocation is immediate at the bank API level; the third party loses the token.
• The audit trail is your bank's, not the third party's. If something goes wrong (an unauthorised transaction, a misallocated payment) the bank's logs are the source of truth — not the app's.

What changes for a landlord on day 1 vs day 90

The benefits compound. Day 1 vs month 3 looks very different.

Day 1

You connect your business / landlord bank account. The tool pulls your last 90 days of transactions (the typical AIS history window). Inflows tagged "RENT-MAY" or matching a tenant reference are auto-matched; outflows tagged "BRITISH GAS" or "AVIVA" are auto-categorised against HMRC SA105 categories. You spend 10 minutes confirming or correcting the first batch — the system learns from your corrections, so the next batch is more accurate.

Week 2

The first new rent payment arrives. The tool matches it to the right tenant in real time and updates that tenancy's "paid up to" date. You no longer wait until month-end to discover that May's rent was £50 short.

Month 3

Your matching accuracy is approaching 100% because the model has seen three months of your patterns. You stop spending Sundays reconciling. Year-end becomes a one-evening review of categories rather than a multi-day rebuild from bank statements + receipts.

Tax-year-end

Digital records can make an SA105-aligned review easier, but you still need to verify totals, categories and any accountant adjustments. Actual preparation time depends on the completeness and quality of the records.

The limits — what Open Banking can't do

Honesty matters here, because landlord tools tend to oversell this:

• It can't see joint personal accounts where you only have a card mandate. If the property income hits an account in your spouse's sole name and you both have authority to spend, the AIS authorisation has to come from the named account holder.
• It can't match cash payments. If your tenant pays in cash and you bank it under a generic "DEPOSIT" reference, you'll need to manually link that to the tenant.
• Reference fields are messy. Tenants don't always use the reference you give them. The tool's matching is a best-effort fuzzy match on amount + tenant + date proximity; you'll still occasionally need to confirm an ambiguous match.
• Some accounts aren't covered. Building society savings accounts, Cash ISAs, and some credit-union accounts aren't in scope of the CMA9 mandate. The big high-street current accounts are.
• Standing orders look identical to one-off payments at the API level. Detecting a stopped standing order requires watching for an expected payment that didn't arrive — the tool has to know what to expect.

Open Banking vs. the alternatives

Three other ways landlords have historically tracked rent:

• CSV statement import: Download monthly statements from online banking, parse them into the tool. Reliable but lagging (you only see month N data after month-end), and costly in admin time.
• Manual entry: Type each transaction into a spreadsheet or app as it lands. Most accurate categorisation (you remember what each spend was for), but the slowest method and prone to gaps when life gets busy.
• Letting agent statements: If an agent collects rent, they send a monthly remittance with all rent receipts grossed up and their fee deducted. Easy on you, but the underlying tenant-by-tenant detail is in their software, not yours — and you pay 8–12% for the service.

Open Banking can reduce reconciliation work, but timing, matching quality, bank coverage and ongoing consent depend on the provider and the account. It does not remove the need to review categories and unmatched transactions.

40+ UK banks supported

The CMA9 mandate covers Barclays, HSBC (including First Direct + M&S Bank), Lloyds (including Halifax + Bank of Scotland), NatWest (including RBS + Ulster Bank), Santander, Nationwide, Danske, AIB, and Bank of Ireland. Beyond the CMA9, the FCA register lists 40+ challenger banks and credit-card issuers participating voluntarily including Monzo, Starling, Revolut, Tide, Atom, Metro Bank, TSB, Co-operative Bank, Triodos, Allica, Cashplus, Mettle, and most others a UK landlord might bank with. If your bank isn't listed, you can still enter transactions manually or upload CSV statements.

Privacy + data retention

Retention depends on the service, purpose and applicable privacy terms. Tendmere does not receive Open Banking transaction data in the current release because the provider connection is not live. Review the current privacy notice before enabling any future connection.

Cost

Open Banking AIS access is free at the bank level — there's no API charge to the third party. Landlord tools that bundle Open Banking typically include it in their plan rather than charging per connection. There's no per-transaction fee, no setup fee, no minimum balance requirement.

Getting started in Tendmere

Tendmere's automatic bank feed is not live yet. The current Bank Connections screen records interest and provides manual or CSV reconciliation while a read-only connection is prepared through an FCA-authorised provider. Tendmere is not claiming to be an authorised AISP.

Related guides

• Automating rent collection for UK landlords
• How Tendmere uses Open Banking
• Landlord record-keeping: what to track