Open Banking for Payments: A2A (Account-to-Account) as a Default

The Dutch e-commerce giant Bol.com processes 82% of its €11.8 billion annual GMV through iDEAL, the Netherlands' account-to-account payment scheme. Merchants pay €0.29 per transaction regardless of amount — compared to €295 for a €10,000 purchase via Mastercard at 2.95% interchange. This 10x cost differential explains why A2A payment volumes across Europe reached €2.1 trillion in 2025, surpassing credit card transaction value for the first time. Payment Service Providers like Adyen, Stripe, and Mollie now offer A2A rails as the default checkout option, not an alternative.

Account-to-account transfers have existed since the advent of electronic banking, but required manual entry of routing numbers, account details, and multi-day settlement. Open Banking regulations — starting with PSD2 in Europe and expanding to 47 countries by 2026 — mandated that banks expose standardized APIs for third-party payment initiation. Combined with instant payment rails like SEPA Instant, FedNow, and UPI, these APIs enable consumers to pay directly from their bank account with the same two-click experience as storing a card on file.

The Economics Driving A2A Adoption

Visa and Mastercard's interchange rates range from 0.05% for regulated debit in Europe to 3.5% for premium credit cards in the United States. A mid-sized retailer processing $100 million annually pays $1.5-2.5 million in card fees. A2A payments through schemes like SEPA Instant cost €0.002-0.20 per transaction. For that same $100 million retailer processing 2 million transactions, A2A reduces payment costs from $2 million to $200,000 — a 90% reduction that flows directly to EBITDA.

Beyond transaction fees, A2A payments eliminate several hidden costs of card acceptance. Chargebacks, which cost merchants $20-100 per dispute plus the transaction amount, drop by 94% with bank-authenticated payments. Card fraud, running at 6-14 basis points of transaction value, becomes the bank's liability under Strong Customer Authentication (SCA) rules. Settlement occurs within 10 seconds via instant rails versus T+2 for cards, improving working capital by 2-3 days of revenue.

Global Implementation Landscape

India's UPI processed 131 billion transactions worth $2.2 trillion in 2025, making it the world's largest real-time payment system. PhonePe, Google Pay, and Paytm connect to 425 banks through the National Payments Corporation of India (NPCI) infrastructure. Transaction success rates exceed 99.2% with sub-second authorization. The government mandates zero merchant fees for UPI, driving adoption to 89% of urban retail transactions.

Europe's fragmented approach created 29 different A2A schemes before PSD2 standardization. iDEAL in Netherlands (70% e-commerce penetration), Swish in Sweden (7.8 million users from 10.5 million population), and BLIK in Poland (15 million active users) demonstrate mature adoption. The European Payments Initiative (EPI) aims to unify these schemes by 2027, with 16 banks and payment processors committing €1.5 billion to build pan-European A2A infrastructure.

The United States lags in A2A adoption despite launching FedNow in July 2023. Only 11% of the 9,000 US banks support Open Banking APIs. Plaid, MX, and Finicity rely on screen scraping for 73% of connections, creating security vulnerabilities and 4-7% failure rates. The Consumer Financial Protection Bureau's proposed Open Banking rule, expected final in Q3 2026, would mandate API access similar to PSD2. Early movers like Stripe Treasury and Modern Treasury already route B2B payments through FedNow and RTP rails, processing $4.2 billion monthly at 0.1% of card costs.

Technical Architecture for A2A Integration

Implementing A2A payments requires three technical components: payment initiation APIs, customer authentication, and settlement reconciliation. Payment Service Providers (PSPs) abstract complexity through unified APIs. Stripe Payment Links detect customer geography and present relevant A2A options — SEPA Instant for Germany, Faster Payments for UK, iDEAL for Netherlands. The PSP handles bank API integration, tokenization, and retry logic.

Authentication represents the critical technical challenge. Banks implement Strong Customer Authentication through mobile apps (74%), SMS OTP (19%), or hardware tokens (7%). Payment initiation requires explicit consent captured through OAuth 2.0 flows. TrueLayer's research across 3,000 merchants found 68-millisecond API latency and 99.94% uptime necessary to match card authorization performance. Fallback routing to alternate banks when primary connections fail improves success rates from 94% to 98.5%.

Risk Management in Open Banking Payments

A2A payments shift fraud liability from merchants to banks, but create new attack vectors. Account takeover (ATO) fraud increased 340% in markets with mature Open Banking adoption. Criminals use stolen credentials to initiate payments from compromised accounts. Banks implement behavioral biometrics, device fingerprinting, and transaction pattern analysis to detect anomalous payment requests. Nudata Security, BioCatch, and Buguroo provide specialized A2A fraud detection, analyzing mouse movements, typing patterns, and device characteristics.

Authorized push payment (APP) fraud, where victims are manipulated into approving transfers, reached £583 million in the UK during 2024. Unlike card transactions, A2A payments are irrevocable once settled. The UK's Contingent Reimbursement Model mandates banks reimburse APP fraud victims unless gross negligence is proven. Banks invest heavily in payment screening — HSBC's system analyzes 65 data points in 40 milliseconds before approving transfers. Machine learning models trained on 1.2 billion historical transactions achieve 91% fraud detection with 0.3% false positive rates.

Real-time sanctions screening becomes critical when payments settle instantly. ComplyAdvantage, Napier, and Featurespace provide sub-50ms screening against OFAC, EU, UN, and other watchlists. False positive rates of 12-15% for real-time decisions compare unfavorably to batch screening's 3-4%, creating operational overhead. Banks implement tiered screening — full verification for amounts over €10,000, simplified checks below €1,000.

Use Cases Driving Enterprise Adoption

Subscription businesses achieve 94% payment success rates with A2A versus 87% for cards. Spotify migrated 12 million European subscribers to SEPA Direct Debit and Open Banking recurring payments, reducing involuntary churn by 31%. Variable recurring payments (VRP), enabled by PSD2's consent framework, allow dynamic amounts without re-authentication. British Gas uses VRP for 2.1 million customers, automatically collecting actual usage amounts rather than fixed direct debits. Payment failures dropped from 8% to 0.4%.

B2B payments represent the largest A2A opportunity. Coupa, SAP Ariba, and Tungsten integrate bank APIs for straight-through invoice processing. A manufacturer paying 500 suppliers monthly reduces processing costs from $7,500 (ACH at $15/payment) to $500 (A2A at $1/payment) while accelerating settlement from 2-3 days to instant. Dynamic discounting — offering 2% for immediate payment — becomes viable when settlement is guaranteed within seconds.

Marketplaces and platforms monetize A2A float differently than card-based models. Airbnb holds guest payments for 24 hours post-checkout before releasing to hosts. With A2A instant settlement, they restructured to a 0.5% platform fee on immediate payouts versus 3% for standard 7-day settlement. Uber implements similar dynamic pricing for driver cashouts — instant via A2A for 0.4% fee, next-day for 0.1%, weekly batch free. This optionality generates $180 million annual revenue from float monetization.

Infrastructure Vendors and Implementation Partners

TrueLayer, acquired by Visa for $1.2 billion in 2025, provides unified APIs across 3,000 European banks. Their payment initiation SDK handles bank selection, authentication, and status webhooks. Clients include Revolut, Cazoo, and Tide. Average implementation takes 3 weeks with pre-built components for React, iOS, and Android. Volume pricing starts at 0.2% + €0.20, decreasing to 0.05% + €0.10 above €50 million monthly.

Plaid's US footprint covers 12,000 financial institutions, though only 1,400 support OAuth connections for payment initiation. Their Instant Verification product combines micro-deposits with Open Banking where available, achieving 94% account verification success. Goldman Sachs' Marcus, Chime, and Venmo rely on Plaid for account funding. The platform processes $400 million daily in A2A transfers at 0.15% take rate.

Future Trajectory: Embedded Finance and Cross-Border

A2A infrastructure enables embedded finance beyond payments. Balance verification APIs let lenders underwrite based on real-time cash flow rather than stated income. Kabbage approves SMB loans in 7 minutes by analyzing 3 months of transaction data. Default rates dropped from 8.2% to 4.7% with actual cash flow visibility. Insurance providers like Lemonade and Root price policies using spending patterns — frequent international transfers indicate travel exposure, restaurant spending suggests lifestyle risks.

Cross-border A2A remains fragmented, but initiatives like SWIFT's instant payments service and the Bank for International Settlements' Nexus project target 2027 for production. The technical challenge involves real-time FX rate locking, multi-jurisdictional compliance, and settlement finality across time zones. Wise pioneered this model, holding local bank accounts in 40 countries to enable A2A transfers that appear domestic on both ends. They process £8 billion monthly at 0.35% average fee versus 3-5% for traditional correspondent banking.

When every bank account becomes a payment credential accessible via API, the concept of 'acceptance' disappears. Merchants don't accept payment types — they accept value transfer, instantly and irrevocably.

Stablecoin and CBDC integration represents the next evolution. Circle's USDC smart contracts could trigger A2A payments for off-ramp conversion. The European Central Bank's digital euro design includes PI/PIS (Payment Initiation Service) APIs compatible with existing Open Banking infrastructure. Singapore's Project Orchid demonstrates wholesale CBDC settlement where commercial banks initiate transfers via modified Open Banking protocols. This convergence positions A2A rails as the bridge between traditional banking and tokenized money.

Card networks recognize the existential threat. Visa Direct and Mastercard Send offer card-to-account transfers, but require recipient card credentials. Visa's acquisition of Tink and TrueLayer signals a strategy shift — if A2A displaces cards, Visa will provide the infrastructure. Mastercard's Open Banking Hub aggregates connections across 3,100 banks. Both networks price A2A services at 0.1-0.3%, cannibalizing higher-margin card revenues to maintain relevance.

By 2030, Juniper Research projects A2A payments will capture 39% of e-commerce transactions in markets with Open Banking regulation. The $4.6 trillion opportunity spans payments, lending, insurance, and wealth management. Technology teams must architect for this reality: payment orchestration layers that route to optimal rails, treasury systems that maximize instant settlement benefits, and risk engines that handle irrevocable transfers. The organizations treating A2A as primary, not alternative, will capture disproportionate margin improvement and customer satisfaction gains in the unbundled money ecosystem.