How it works What you can see Pricing Guide
Industries
Accountants Letting agents Landlords Mortgage brokers Vehicle & equipment rental Solicitors Insolvency practitioners Debt advice Debt counsellors Housing associations Book a demo Get sandbox access
Fundamentals

Open banking history and timeline

By James Fell, Founder & CEO, Credit Canary · About · LinkedIn · Last reviewed 15 October 2026 · 6 min read

Fintech expert with deep knowledge across payments and credit risk.

UK open banking runs from a 2016 competition investigation to a mature standard today. The CMA ordered the largest banks to open their data; it went live in January 2018, gained strong customer authentication and variable recurring payments over the following years, and reached Standard v4.0.1 in March 2026, the same year commercial VRP went live. Here is the path, milestone by milestone.

UK open banking timeline, 2016 to 2026 2016CMA report 2017CMA Order 2018Go-live (v1) 2019SCA 2021VRP & sweeping 2023Roadmap, JROC 2024FAPI migration 2026v4.0.1, cVRP

Milestone by milestone

2016
CMA final report. The Competition and Markets Authority concluded its retail banking investigation and recommended opening up bank data to improve competition. This is the origin of UK open banking.
2017
The CMA Order. The Retail Banking Market Investigation Order required the nine largest current account providers (the CMA9) to adopt a common standard, and created the body that became Open Banking Limited. The Payment Services Regulations 2017 provided the legal basis.
2018
Go-live (v1). Open banking launched in January 2018. Early versions were narrow, and adoption was slow while the ecosystem and the user experience matured.
2019
Strong customer authentication. The regulatory technical standards on SCA and secure communication took effect, cementing the two-factor, bank-side authentication that underpins open banking security.
2021
VRP and sweeping. Variable recurring payments and the "sweeping" use case (moving money between a customer's own accounts) were defined and mandated for the CMA9, laying the groundwork for account-to-account alternatives to Direct Debit and cards.
2023
Roadmap complete, and JROC. Open Banking Limited declared the original CMA roadmap complete in early 2023. The Joint Regulatory Oversight Committee (JROC), led by the FCA and PSR, set out the direction for the next phase and the move to a future entity.
2024
Toward FAPI 1 Advanced. The ecosystem moved onto the FAPI 1 Advanced security profile, replacing older profiles, ahead of its adoption in the v4 Standard.
2026
Standard v4.0.1 and live commercial VRP. The Standard reached v4.0.1 on 18 March 2026, adopting FAPI 1 Advanced and making payload signature verification mandatory. Commercial VRP went live via the UK Payments Initiative scheme, with Wave 1 on 2 June 2026. The transition to a future entity continues.

From the data consumer's side

The useful read of this history is that open banking has moved from a compliance project to an infrastructure you can build a business on. The early years were about banks meeting an obligation; the recent years are about real volume, verified income, affordability and now commercial payments. For a lender or broker weighing it up, the direction of travel matters: account-to-account payments and richer data sharing are expanding, not contracting. Where that goes next is covered in open banking vs open finance.

How Credit Canary does it

Credit Canary builds on the mature end of this timeline: the v4 Standard, FAPI 1 Advanced security, and live account-to-account payments. We provide open banking through a regulated provider and combine it with credit bureau and identity data, so you benefit from a decade of standardisation without managing any of it.

Request a quote

Common questions

When did open banking start in the UK?

Open banking went live in the UK in January 2018, following the CMA's 2017 Order. The current account providers known as the CMA9 were the first to implement it.

What is the latest version of the Open Banking Standard?

The latest is v4.0.1, published on 18 March 2026, with release notes dated 1 April 2026. It adopts the FAPI 1 Advanced security profile and made payload signature verification mandatory.

When did commercial VRP go live?

Commercial variable recurring payments went live in the UK via the UK Payments Initiative scheme, with Wave 1 launching on 2 June 2026 for regulated and lower-risk sectors.

Primary sources

Credit Canary provides open banking through fumopay limited, an FCA-authorised account information and payment initiation service provider (FRN 925689), of which Credit Canary is an agent. Underlying bank connectivity is also provided by fumopay limited. This page is an evergreen reference and is reviewed and dated; it is not regulatory, legal or financial advice.