Account aggregation: what it is and how it works in Europe

Account aggregation brings bank, broker and crypto balances into one overview. This is how it works in Europe under PSD2, and where it stops.

Gylder Team4 min readRead with AI

Account aggregation means collecting the balances and transactions of accounts at several financial institutions into one overview, so you see your total without logging in everywhere. In Europe, as of October 2026, bank accounts are aggregated through PSD2 account information services, while brokers and crypto exchanges still connect through exports or API keys.

That split decides how complete a net worth app can be, because a tracker that reads all your banks automatically may still need a file from each broker. Below we explain who may aggregate your accounts, why investments fall outside the system and what planned open finance rules would change.

How does account aggregation work in Europe?

In Europe, account aggregation runs on the revised Payment Services Directive, Directive (EU) 2015/2366, better known as PSD2. It lets a third party you choose read your payment accounts through an account information service, defined as "an online service to provide consolidated information on one or more payment accounts". The company offering that service is an account information service provider (AISP), and it needs permission from a national supervisor, such as De Nederlandsche Bank (DNB) in the Netherlands. Most apps rely on an aggregator that holds one, such as Enable Banking, registered with the Finnish supervisor, Tink, authorised in Sweden, or Plaid, which works in Europe under a DNB licence.

Every connection starts with your consent. The app sends you to your bank, where you log in with strong customer authentication and pick the accounts to share, so the app never sees your password. An account information service may only read the accounts you designate and cannot move money, because initiating a payment is a separate service that needs separate consent. Our article What is PSD2, and what can an app do with your bank data? covers what such an app can see.

That consent expires, but less often than before. Since 25 July 2023, Delegated Regulation (EU) 2022/2360 lets banks ask you to log in again for access to your balance and last 90 days of transactions only once every 180 days. The old limit was 90 days, and a bank may only ask sooner if it suspects fraud, which is why trackers ask you to reconnect about twice a year.

Why brokers and crypto exchanges fall outside PSD2

PSD2 only covers payment accounts, which the directive describes as accounts "used for the execution of payment transactions". A securities account at DEGIRO or a crypto balance at Bitvavo is not a payment account, so these platforms have no duty to open their data to third parties. Aggregators therefore depend on what each platform offers, such as a read-only API key, a CSV export or manual entry. Some apps ask for your broker login instead, and our guide to tracking ING, DEGIRO and Coinbase in one overview explains the risks of handing over that password.

The European Commission wants to close this gap with the Financial Data Access regulation (FiDA), which it proposed on 28 June 2023. According to the European Parliament's summary, the proposal covers savings, investments, crypto-assets, pensions and non-life insurance, while payment accounts stay under PSD2. On 14 October 2026 the Parliament's Legislative Observatory still showed no agreed text, so nobody knows yet when brokers must open up.

Europe differs here from the United States, where aggregators long relied partly on screen scraping, in which an app uses your login details to sign in to your bank. The US consumer regulator (CFPB) said in October 2024 that a new rule would work towards ending that practice, but the rule has been under reconsideration since August 2025.

How Gylder fits in

Gylder (gylder.nl) is a net worth tracker, not a budgeting app, and it uses each aggregation route where it fits. Bank accounts connect through PSD2 via Enable Banking, which covers more than 2,700 banks in 29 countries, including ING, ABN AMRO, Rabobank and bunq. DEGIRO comes in through an account export (CSV), while Bitvavo and Coinbase connect through API keys that can only read data. Property and gold are added by hand, and our overview of the best net worth tracker for Europe compares how other apps handle this.

What this doesn't tell you

Coverage differs per bank and account type, so a bank on an aggregator's list may not expose every savings account or credit card. The timing of FiDA also stays uncertain until the EU institutions agree on a text. This article is general information, not financial advice.

Frequently asked questions

Is account aggregation safe? Under PSD2 an aggregator only gets read access to the accounts you select, and you log in at your own bank. The provider is supervised, and you can withdraw consent at any time.

Can a net worth app connect to DEGIRO through open banking? No, because a DEGIRO securities account is not a payment account and falls outside PSD2. Apps import DEGIRO data through an export file or, in some cases, by logging in with your DEGIRO credentials.

What is the difference between open banking and open finance? Open banking is the sharing of payment account data under PSD2, which already applies across the EU. Open finance would extend that to savings, investments, crypto-assets, pensions and insurance through FiDA, which was still not agreed in October 2026.

Related Articles