What is Open Banking?
Open Banking is a secure, government-regulated system that allows you to share your bank account information with authorised providers, with your permission. It was introduced in the UK by the Competition and Markets Authority in 2017 and is now used by over 13 million people across the country.
Rather than you having to log in to your bank and download and send statements to us manually, Open Banking creates a secure, read-only connection between your bank and us for 90 days to allow us to see your expenses payments.
You stay in control at all times and can remove access whenever you choose.
To become an authorised open banking provider in the UK, you must be regulated by the Financial Conduct Authority (FCA) and comply with the Payment Services Regulations 2017 (PSRs), which implement the EU’s Revised Payment Service Directive (PSD2) into UK law.
Why does RIFT need me to connect through Open Banking?
HMRC requires evidence that you have spent the money on the expenses you are claiming back in your tax refund. Open Banking is the quickest, most secure and most reliable way to provide that evidence. It’s the system HMRC itself uses.
While you can send us all your individual receipts or bank statements, when you connect your bank account, we can accurately identify the payments you have made for your work expenses without any additional admin for you..
This gives your refund the strongest possible foundation as we have the evidence HMRC asks to see, using the system they prefer, which helps to avoid delays or follow-up requests further down the line.
It is the fastest route to getting your refund processed. If you prefer not to use Open Banking, you can upload copies of your bank statements as an alternative.
Is Open Banking safe and secture?
Yes. Open Banking is one of the most secure ways to share financial information available in the UK today.
The connection is protected by the same Strong Customer Authentication you already use when you log in to your banking app, whether that is a fingerprint, Face ID or a passcode. You must log in to your bank to authorise the connection.
Your login credentials are never shared with RIFT or anyone else. All data is transferred using the same encrypted technology that your bank uses to protect your own transactions.
Open Banking in the UK is regulated under the Payment Services Regulations 2017 and overseen by the Financial Conduct Authority (FCA). Every provider involved must meet strict security and data-handling standards before they are authorised to operate.
Can RIFT make payments from my account or change anything?
No. Absolutely not.
The connection RIFT uses is read-only. That means we can only view transaction information. We cannot move money, make payments, set up any payment arrangements, change account details, or make any alterations to your account whatsoever.
RIFT will never ask you to approve any payment or transaction as part of the Open Banking process. If you are ever asked to do so, please do not proceed and contact us immediately.
Who is GoCardless and why are they involved?
GoCardless is the authorised Open Banking provider RIFT uses to manage your bank connection securely.
GoCardless is connected to over 100 of the UK's biggest banks, covering 99% of UK bank accounts. When you connect through the RIFT journey, GoCardless manages that connection on our behalf, operating within the same regulatory framework as your own bank.
They are one of the UK's most established and trusted financial technology companies, headquartered in London. They currently work with more than 35,000 businesses for Open Banking services, including major UK organisations and processed over £79 billion in payments last year alone in the UK.
GoCardless hold regulated Account Information Service Provider (AISP) status, which means they are authorised and supervised by the FCA to access and manage financial data in line with strict industry standards.
What information can RIFT actually see?
When you connect your bank account, RIFT can see your account details (including your sort code, account number and account holder name) and your transaction history for the period requested. This is the same information that appears on a bank statement.
This allows us to identify income and work-related expenses that are relevant to your tax refund claim.
We use this information only to support your refund. We do not access your login details, personal banking credentials, savings balances held in separate accounts, or any other financial products not relevant to your claim.
You will be shown clearly by your bank what RIFT will have access to before you confirm the connection.
Will RIFT be able to see all my accounts?
You choose which accounts to connect. If you have more than one account, you can connect the account or accounts that contain relevant income and expenses, and leave others unconnected.
Within the accounts you do connect, RIFT can view transaction data - the amount you paid who it was paid to . This allows us to easily include the costs of your work related expenses such as travel or meals at your work location, in your claim, rather than you having to manually enter all of them.
You are in control throughout. You can revoke access or add accounts at any time.
Do HMRC use Open Banking itself?
Yes. In fact, HMRC was the first government body in the world to offer Open Banking for tax payments, launching the service in March 2021. Since then, HMRC has processed over £12 billion in tax payments through Open Banking.
HMRC has since extended its use of Open Banking to Account Information Services, meaning it now uses the same type of secure bank connection to verify taxpayer details and issue P800 repayments directly to people who have overpaid tax.
When RIFT asks you to connect through Open Banking, we are using the same regulated approach that HMRC itself relies on when returning money to taxpayers.
Is Open Banking widely used in the UK?
Yes. As of 2025, over 13 million people in the UK actively use Open Banking, with 31 million Open Banking transactions made in March 2025 alone. Usage has grown from one in seventeen UK adults in 2021 to one in five today, and that figure continues to rise.
Open Banking is used across a wide range of everyday services, from budgeting apps and accountancy tools to mortgage applications and tax submissions. It is regulated, mainstream and growing rapidly.
What if I do not want to use Open Banking?
That is completely fine. You can upload copies of bank statements through the RIFT document uploader as an alternative.
We recommend Open Banking as the faster and simpler route, but the choice is yours. Either option allows us to support your claim.
You can change to Open Banking at any time if you are unable to get copies of all your bank statements or simply want to save the time it takes to do that.
How do I connect my bank through Open Banking?
The process takes just a few minutes and is straightforward:
1. Visit the Open Banking section in MyRIFT or the RIFT app, or click the secure link sent to you by your RIFT agent.
2. Select your bank from the dropdown list. Type the first two or more letters of your bank name to find it.
3. You will be shown a summary of the information RIFT will use GoCardless to access.
4. Review this and confirm you are happy to proceed.
5. You will be taken to your bank's own secure login page. Sign in as you normally would, using your banking app, biometrics or passcode.
6. Select the account or accounts you want to connect.
7. Once confirmed, you will see a success screen. The connection is now in place.
If you have more than one bank account, you can repeat the process for each account that contains relevant transactions.
What if my bank is not listed?
The GoCardless platform covers 99% of UK bank accounts, so most customers will find their bank available. If your bank does not appear, you will need to provide bank statements as an alternative. Your RIFT agent can guide you through the document upload process.
Can I remove RIFT's access to my bank account?
Yes, at any time. You can revoke access directly through your bank's app or online banking settings. You can also contact RIFT and we will remove the connection from our side.
Removing access does not affect any claim that has already been processed using the information provided.
I share a joint bank account. Is that a problem?
No. You can connect a joint account without needing permission from the other account holder, though you may wish to let them know. The connection remains read-only and no changes will be made to the account.
Is my personal data protected?
Yes. GoCardless holds regulated AISP status and operates under the Financial Conduct Authority's strict data protection requirements. RIFT handles all customer data in line with UK GDPR and our own privacy policy.
Your financial data is used only to support your tax refund claim. It is not sold, shared with third parties for marketing purposes, or used for any reason unrelated to your claim with RIFT.
I am still not sure. What should I do?
If you have any questions or concerns, please speak to your RIFT agent. We are here to guide you through the process and make sure you feel confident at every step.