Enable Banking Docs

Open Banking Specifics in Portugal

# General Specifics

Most Portuguese banks implement Open Banking through the SIBS API Market platform, which serves as the primary Open Banking infrastructure in Portugal. SIBS (Sociedade Interbancária de Serviços) operates this platform as a centralized API marketplace that connects banks, fintechs, and other financial service providers. The platform provides standardized PSD2-compliant APIs for account information services, payment initiation services, and funds confirmation services.

The SIBS API Market offers a unified interface for Third Party Providers (TPPs) and provides developer documentation and sandbox environments for testing. The centralized approach helps to improve consistency across Portuguese banks' Open Banking implementations, though banks' APIs behave with some specifics and also authentication and consent handling have variations.

# Authentication flows and SCA

Portuguese banks predominantly use redirect-based flows for Open Banking authentication, following PSD2 requirements. Users are redirected to their bank's authentication interface where they log in using their online banking credentials. Strong Customer Authentication (SCA) is typically performed through the banks' mobile banking applications using biometric authentication (fingerprint, face recognition) or PIN-based verification.

# Major Banks (ASPSPs)

The most widely used Portuguese ASPSPs, in order of market significance, are:

A complete list of Portuguese ASPSPs is available here (opens new window).

# Payment Specifics

Portuguese banks support SEPA Credit Transfers (SCT) in EUR (Euro) through their Open Banking APIs. As Portugal is part of the eurozone and SEPA, all major banks provide comprehensive support for euro-denominated payments within the Single Euro Payments Area.

SEPA Instant Credit Transfers (SCT Inst) are widely supported by Portuguese banks, enabling real-time euro transfers that are processed within seconds and available 24/7/365. This instant payment capability is particularly well-developed in Portugal, with most major banks offering this service through their Open Banking interfaces.

# Specifics per ASPSP

# Banco BPI

Banco BPI (part of the CaixaBank Group) implements redirect-based flows for Open Banking authentication. The bank uses its BPI Net mobile app for SCA, supporting biometric authentication and PIN-based verification.

# Banco Comercial Português

Banco Comercial Português, widely known as Millennium BCP, implements redirect-based flows for Open Banking authentication. The bank uses its Millennium App for Strong Customer Authentication, which supports biometric authentication (fingerprint and face recognition) as well as PIN-based verification.

# Banco Montepio

Banco Montepio follows redirect-based authentication flows and uses its mobile banking application for Strong Customer Authentication.

# Banco Santander Totta

Banco Santander Totta follows redirect-based authentication flows and utilizes the Santander Portugal mobile application for SCA. The authentication process supports biometric verification and PIN-based authentication.

# BBVA

BBVA (Banco Bilbao Vizcaya Argentaria) operates in Portugal as part of its international network.

# Sandbox Availability

BBVA provides a sandbox environment suitable for end-to-end testing. Sandbox credentials can be found here.

# Caixa Geral de Depósitos

Caixa Geral de Depósitos (CGD), Portugal's largest bank, uses redirect-based authentication flow in its Open Banking interface. The bank leverages its Caixadirecta mobile app for SCA, supporting both biometric authentication and PIN-based verification. Automatic app switching is not supported.

# Novo Banco

Novo Banco uses redirect-based authentication in its Open Banking interface. The bank employs its mobile banking application for Strong Customer Authentication.

← Romania →