Why Traditional Banks Must Modernize Payment Infrastructure to Retain Customers

The warning arrives alongside a structural milestone reported by Financial IT: Open Banking has crossed one billion completed payments and 100 billion API calls, a threshold that signals the underlying connectivity layer has reached operational maturity rather than experimental status.

The rails are already built

The volume figures matter less for their absolute size than for what they reveal about market architecture. API gateways between bank accounts and third-party providers now process traffic at a scale that would have been considered aspirational when PSD2 was first implemented. Two independent outlets — Financial IT and UKTN — have reported the one-billion-payments threshold, suggesting the metric is being verified across aggregators rather than disclosed by a single self-interested party.

For incumbent institutions, the implication is structural rather than competitive. Payment optionality is no longer gated by a correspondent banking relationship or a card network contract. It is mediated by standardized API endpoints, and reconciliation against those endpoints introduces a new category of ledger dependency. Customers who initiate transfers, aggregations, or embedded finance flows through third-party applications are, in effect, routing around legacy payment infrastructure — and the resulting transaction data leaves the institution's perimeter entirely.

Compliance friction is rising in parallel

The same week, the US Office of the Comptroller of the Currency denied Wise's application for a US national trust bank charter, citing historical deficiencies in the company's anti-money laundering and countering the financing of terrorism program, as reported by FinTech Futures. The denial illustrates a second pressure vector converging on payment providers: regulators are enforcing, not accommodating, new entrants with incomplete compliance histories. Charter frameworks — the same structural logic that governs institutional access in adjacent regulated domains, including preservation mandates such as Italy's new national sustainability charter for UNESCO sites — are being applied to the entry criteria for financial infrastructure, not relaxed to accommodate growth narratives.

What to monitor

The combination produces a specific architectural problem for established banks. Expanding payment offerings to retain customers requires either internal API development — with its reconciliation and systemic risk implications — or partnership with embedded finance providers, each of which carries counterparty exposure and its own regulatory posture. Meanwhile, non-bank payment firms seeking deeper US market access are being held to enhanced compliance baselines.

For institutions still treating payment modernization as a roadmap item rather than a defensive necessity, the trajectory is harder to dispute. Transaction data has effectively migrated outside the perimeter, compliance entry barriers for challengers are rising rather than falling, and the remaining competitive moat — customer trust in regulated deposit-taking — is the asset most exposed if payment UX continues to lag. The liability is no longer hypothetical.