Open banking in the United States is not failing; it is colliding with its own scale. Over the past decade, consumer-permissioned financial data sharing has evolved from a niche fintech capability into a foundational layer of consumer finance. Today, it underpins account onboarding, income verification, credit underwriting, fraud detection, payments authorization, and personal financial management across millions of households. In practical terms, open banking has become connective infrastructure for modern fintech.
The scale is now measurable. As of April 2025, approximately 114 million consumer accounts were connected via API-based data sharing aligned with the Financial Data Exchange standard, up from fewer than 40 million in 2020. At the application level, Plaid reports that roughly 33 percent of US consumers with a bank account used Plaid-powered connectivity to sign up for a fintech product in 2023, indicating that data aggregation is now mainstream infrastructure rather than an edge capability.
This expansion occurred without a fully specified regulatory framework. Section 1033 of the Dodd-Frank Act, enacted in 2010, established a statutory consumer right to access financial data but deferred operational details. In practice, the market filled the gap. Credential-based screen scraping became dominant, bilateral contracts replaced uniform rules, and a small number of aggregators emerged as critical intermediaries connecting more than 11,000 US financial institutions to fintech platforms.
For years, this system functioned because incentives aligned. Banks treated data access as a customer-retention cost. Fintechs prioritized scale in a venture-funded environment. Consumers favored convenience. As fintech matured, however, the risk profile changed. Data flows scaled from millions to tens of millions of users, and financial data became embedded in decisions involving trillions of dollars in annual consumer credit and payments volume. At that scale, weaknesses in the data layer create infrastructure risk rather than isolated technical failure.
The CFPB’s Personal Financial Data Rights rule under Section 1033 is an attempt to formalize this infrastructure. Yet funding constraints, litigation, and unresolved questions around cost allocation have slowed implementation, increasing the likelihood of fragmented standards, variable pricing, and uneven access. The issue is no longer whether open banking exists, but whether the United States can govern fintech infrastructure proportionately to its economic importance.
| Metric | Value | Implication |
|---|---|---|
| API-based account connections | 114 million accounts | Infrastructure-level dependency |
| US consumers using fintech connectivity | 33% of banked consumers | Mainstream fintech adoption |
| Average data breach cost (financial services) | $4.44 million | High security and compliance risk |
| Annual US internet fraud losses | $16 billion | Elevated fraud environment |
| Estimated fintech cost increase from paid APIs | 3–7% | Margin pressure on fintechs |
| Reduction in consumer switching rates | 5–10 percentage points | Weaker competition and higher prices |
What Open Banking Is and Why Fintech Depends on It
Open banking is not a fintech product category; it is a data portability framework. It allows consumers to authorize third parties to access defined financial information held by banks in order to receive services. Its economic value lies in reducing verification costs and information asymmetry.
The benefits are quantifiable. Traditional income verification using documents or payroll databases can add two to five days to loan origination and increases application abandonment by 15–25 percent. Transaction-based verification via open banking can occur in minutes and reduces manual review costs by 30–50 percent, materially altering underwriting economics.
This infrastructure now supports an estimated $1.2 trillion in annual US consumer credit originations that rely on alternative or cash-flow data. Without reliable data access, many fintech lending, budgeting, and account-switching products become slower, more expensive, or infeasible.
How the US System Scaled Ahead of Governance
US open banking scaled through pragmatic market solutions. Where banks lacked APIs, aggregators used consumer-provided credentials to retrieve data directly from online banking portals. By 2019, screen scraping accounted for more than 70 percent of fintech data connections.
Industry-led migration toward APIs has since accelerated. By 2025, APIs accounted for a majority of new connections, with FDX reporting 114 million API-aligned connections. However, unlike the UK or EU, where APIs are mandated and generally free, US banks retain discretion over pricing, throttling, and permitted use.
This discretion has economic consequences. Platform fintechs estimate that maintaining multiple integration paths in a fragmented environment increases engineering, compliance, and monitoring costs by 20–40 percent compared with standardized regimes.
Why Regulation Is Arriving Now
Regulatory attention reflects fintech’s transition from innovation layer to infrastructure. Open banking now underpins functions regulators traditionally view as systemically important, including credit allocation, fraud monitoring, and payments integrity.
The risk environment is quantifiable. IBM’s 2025 Cost of a Data Breach Report places the global average breach cost at $4.44 million, with financial services incidents often exceeding $6 million due to fraud remediation and regulatory response. The FBI reported over $16 billion in internet crime losses in 2024, with financial fraud the largest category. Regulators increasingly view unmanaged data-sharing networks as risk multipliers rather than neutral pipes.
The CFPB’s Section 1033 framework seeks to define accountability in this environment, but funding constraints and litigation have pushed implementation toward interim rulemaking, raising the probability of uneven compliance and delayed standardization.
Fragmentation Risk and the Economics of Data Access
Fragmentation shifts data access from entitlement to negotiation. Banks face real infrastructure and fraud costs in supporting high-volume third-party access and have begun negotiating paid API arrangements.
The cost implications are material. High-frequency fintech use cases may require 20–40 data refreshes per user per year. At scale, even $0.05–$0.20 per-call fees translate into annual costs measured in tens of millions of dollars for large aggregators or platform fintechs. Industry reporting in 2025 suggested that paid access could raise operating costs for data-dependent fintechs by 3–7 percent, significant in businesses where net margins often fall below 10 percent.
These costs propagate downstream through reduced features, tighter eligibility criteria, or indirect consumer price increases.
Vendor Concentration and Infrastructure Fragility
Aggregator concentration magnifies systemic exposure. A small number of providers mediate connectivity for tens of millions of users. When access terms change at large banks or disputes arise, disruptions can affect hundreds of fintech applications simultaneously.
Operational incidents illustrate this fragility. Past aggregator outages have produced double-digit percentage declines in daily transaction volumes for dependent apps, underscoring how deeply integrated the data layer has become.
Consumer Welfare and Competition Effects
Fragmentation has measurable welfare effects. Research on consumer finance switching costs shows that even modest increases in friction reduce switching rates by 5–10 percentage points, weakening price competition in deposits, cards, and personal lending. Reduced switching correlates with higher average interest rates and fees.
Lower-income and credit-thin consumers are disproportionately affected. Alternative data underwriting can expand approval rates by 20–30 percent in some credit contexts. Fragmentation that undermines data reliability risks reversing these gains.
Global Spillovers and Capital Allocation
US regulatory outcomes influence global fintech through architecture and capital allocation rather than direct mandate. Multinational fintechs design modular systems and reuse assumptions across jurisdictions. If US open banking stabilizes around negotiated access and pricing variance, that model becomes a reference point for emerging markets without prescriptive regimes.
Capital flows respond to clarity. Visa’s decision to close its US open banking unit while continuing investment in more regulated markets illustrates how infrastructure capital prioritizes predictability over market size alone.
Forward Outlook: Transitional Phase or Permanent Equilibrium
Two outcomes remain plausible. In a convergence scenario, interim rules mature into enforceable standards, pricing variance narrows, and open banking stabilizes as regulated infrastructure. Consumer switching improves, underwriting costs decline, and competition intensifies.
In a normalization scenario, fragmentation persists. Access remains widespread but conditional. Costs remain structurally higher, concentration increases, and consumer welfare gains plateau below potential. Innovation continues, but its distribution narrows.
The regulatory turning point is therefore not whether open banking exists, but whether fintech infrastructure can be governed with the predictability and accountability that infrastructure requires.
Key Takeaways
- Open banking now supports over 100 million US account connections, making it infrastructure rather than experimentation.
- Fintech reliance on data access underpins trillions of dollars in annual consumer finance activity.
- Fragmentation introduces measurable cost increases (3–7%), security exposure, and competitive drag.
- Consumer welfare losses emerge through reduced switching and weaker competitive pressure.
- US regulatory outcomes will shape global fintech architecture through capital and design decisions.
Sources
* Consumer Financial Protection Bureau; Required Rulemaking on Personal Financial Data Rights; – Link
* Consumer Financial Protection Bureau; Personal Financial Data Rights Final Rule (October 2024, PDF); – Link
* Congressional Research Service; Open Banking and the CFPB’s Section 1033 Rule; – Link
* Financial Data Exchange; 114 Million Reasons to Keep Moving Forward on Industry-Led Standard for Secure Data Sharing; – Link
* Plaid; Plaid 2023 Year in Review; – Link
* Reuters; US Consumer Bureau to Issue ‘Interim Final’ Open Banking Rule, Cites Funding Shortfall; – Link
* Reuters; US Judge Blocks Consumer Agency’s Open Banking Rules for Now; – Link
* IBM; Cost of a Data Breach Report 2025; – Link
* Institute of Internet Economics; The Hybrid Banking Era: How Global Consumers and Markets Are Reshaping Financial Services; – Link
* Federal Bureau of Investigation; Internet Crime Report 2024 (PDF); – Link
* Open Banking Limited (UK); UK Open Banking Launch January 2018; – Link
* EUR-Lex; Directive (EU) 2015/2366 on Payment Services (PSD2); – Link
