Thoa Tran Back to selected work
Shipped and ongoing Open banking · Incident & support · May 2026 – now

Keeping brokers' trust when open banking breaks

Open banking lets brokers pull a client's bank statements straight from the bank, with the client's consent. It went live in May, a large incident followed, and then came a steady stream of bank-side problems that brokers saw as our bugs. I was on the support side: I triaged what brokers reported, found the causes, got what was ours to fix in front of engineering, and wrote the words brokers saw.

My role
Support triage, root-cause analysis, product fixes and every word brokers saw.
Team
Me, our backend lead and engineering team, and our open banking provider.
Timeline
Mid-May 2026 to now.
Users
Mortgage brokers, and the clients they send bank connection requests to.

Three parties, and brokers only see one

Bank data passes through three hands before a broker sees it: the client's bank, our open banking provider, and our platform. When anything goes wrong at any step, the broker sees it in our product, so to them it's our bug.

I came to this support work without a lending background and without a local bank account to test the flows myself. That shaped my method: I couldn't reproduce problems on my own, so I learned to rebuild them from the evidence brokers and the provider could give me.

The first week: keep brokers informed while engineering fixed it

Go-live week

A large incident right after launch

Open banking went live in late May, and a large incident followed within days. Our backend lead shipped the hotfix seven days after go-live. My part was the other side of that week: the brokers.

During that week brokers were mid-application with real clients. Silence would read as “they don't know”. A blocking alert would stop work that still mostly functioned.

What I did: triaged incoming tickets, passed engineering the patterns and evidence from them, and designed a dismissible banner that named the problem, said what still worked, and promised the next update.

Broker's application continues underneath
Rebuilt banner, sample wording

Why statements went missing

The most common ticket after launch was “my client's home loan statement isn't there.” The connection worked, other accounts came through, and nothing showed an error.

Comparing tickets, I found the pattern. A statement only arrives if its whole cycle falls inside the window the client consented to. Transaction accounts produce statements every month. Some home loans produce one every three to six months, so a three-month window can miss it entirely.

Consent window
93 days
Monthly account
statement
Home loan
cycle starts before the window
6 months ago3 months agotoday
How a long statement cycle falls outside the window

I turned that into a short guidance article in brokers' terms: why it happens, how to tell, and two ways forward. Start a new application with a longer window for that client, or ask the client to download the statement from their internet banking.

Defending a 93-day default

Privacy by default

Longer isn't better

Once brokers learned that longer windows caught more statements, the obvious request was to make every window long. I argued to keep the default at 93 days.

Lenders need about three months of history for most applications. A year of data by default would expose older parts of a client's financial life that nobody needs, and that the client may not expect to share.

Where it landed: 93 days stays the default. The allowed range now goes up to 365 days, so brokers can choose a longer window for the clients who need it.

93 days

Enough for most lenders. Choose up to 365 days if your client has a home loan with long statement cycles.

Concept for in-product guidance, sample wording

Bank-side bugs that looked like ours

Brokers can't see past our screen, so I learned to separate what we could fix from what we could only explain.

What brokers sawActual causeWhat we did
No running balance on transactionsOne bank's API doesn't provide itExplained the limit; client downloads the official statement meanwhile
Negative closing balances overnightA faulty bank release, fixed the next day but not retroactivelyTold brokers exactly which connections needed a fresh reconnect
Statements without the official trust markBanks outside, or still joining, the open banking frameworkClear wording on what that means for lenders
“Duplicate” files per accountA statement and a transaction file, by designGuidance article, so brokers stopped raising it
Old data after a client reconnectsSummaries use the first connection onlyDocumented the limit and a workaround; raised it as a product issue

The words brokers and clients saw

Content design

A text message clients would trust

Clients receive a text asking them to connect their bank. To a cautious client, that looks exactly like a scam. The message had to fit one SMS segment, use only characters every phone shows correctly, and end with a sender clients could check.

I applied the same thinking to every reply brokers got from support: no internal environment names, no vendor names, and requests phrased as requests, not instructions.

Hi Sam, Alex from Sample Mortgages has asked you to securely share your bank statements for your loan application. Start here: link.example/abcSent via [platform] - support@[platform]
160 characters · plain SMS characters only
Rebuilt message, sample names

A playbook, not heroics

Most tickets fell into a few shapes, so I wrote down how to handle the most common one: “it should have worked, but it didn't.”

Hypothesis

Name the most likely cause from past tickets.

One diagnostic question

The single answer that confirms or rules it out.

Evidence request

Ask for what proves it: a screenshot, an application number.

No blame

Never imply the broker or client did it wrong.

Workaround

A way to keep the application moving today.

Contingency

What we do next if the hypothesis is wrong.

For problems caused by a bank or another vendor, a second rule set applies: confirm the issue is known without promising a date, commit to a concrete next step, and ask the broker's consent before sharing any client data outside the company.

Every recurring ticket also goes back to the product backlog. Requests like shared team email logins aren't support questions; they're signals about how broker firms actually work.

Where my manager and I disagree

One limitation kept coming back: when a client reconnects their bank, summaries still show data from the first connection. We agree it needs fixing. We disagree on how.

My proposal

Anchor every summary to one fixed window

A global filter counts back from the date the application was created. Every tab and PDF shows the same period. If the data is too old, the broker starts a new application.

Strength: one consistent period that matches what a lender would assess. Cost: a new application when data goes stale.

Manager's preference

Refresh to the latest data on every reconnect

Each time a client reconnects, summaries update to the newest data.

Strength: brokers always see current data with no extra step. Cost: the period behind a summary can change between views, which is harder to audit.

I designed the flow and requirements for my option, wrote up both with their trade-offs, and left the call with my manager. It's still open. Either way, the team will build from a written comparison instead of a hallway opinion.

Decisions I'd defend, and what they cost

A dismissible banner during the incident

Honest about the problem without stopping brokers' work.

Some brokers dismissed it and asked anyway.

Keep 93 days as the default

Enough for lenders, nothing more of the client's history.

Brokers with long-cycle home loans need an extra step.

Explain bank-side issues instead of absorbing them

Brokers get an accurate picture and a workaround.

We can't promise a fix date for someone else's system.

Write the playbook down

Anyone on the team can answer the common cases the same way.

Time spent writing instead of closing tickets that week.

Outcome

Day onesupport from the incident onward, keeping brokers informed until the team's hotfix landed on day seven.
93 daysdefault kept, with up to 365 days available for long statement cycles.
5+ monthsowning open banking support since launch, with recurring issues turned into guidance.
1 playbookfor “should have worked” tickets, plus rules for bank-side issues.

What I'd do next

  • Warn brokers in the product when the chosen window is shorter than a client's loan statement cycle, before the request goes out.
  • Add a simple status note for known bank-side issues, so brokers can check before raising a ticket.
  • Settle the reconnect question with a small test: show both options to a few brokers and measure which one they trust.

What I learned: when your product depends on other companies' systems, trust comes less from never failing and more from being the one who explains clearly what happened and what to do now.