Skip to content
Log in

Swedbank PSD2 API news and updates

Published 01 september 2025

We're would like to share some important news and updates regarding the PSD2 API.

Sweden

Secure start with BankID

Bank ID introduced Universal link in BankID V6 that can be used for customer redirection from BankID app to TPP app. To support this improvement, we are introducing a new header: ‘X-BankID-Redirect-URI’. Starting from September 10th, this header will be available for use in production.

Key Details:

  • Applicability: The header can be used with endpoints for PUT payment signing and POST authorise-decoupled for decoupled login (for more detailed information, please refer to our Swagger documentation).
  • Optional Use: If the header is omitted, users will remain within the BankID app after signing.
  • Specific Use Case: This new header is specifically designed for decoupled authorisations only. Please do not confuse it with our existing redirect URI parameter used in redirect flows to navigate customers from bank UI to TPP apps.

More info can be found in BankID page https://developers.bankid.com/getting-started/autostart.

Older version of BankID will be discontinued soon. Please check and update your services accordingly. More info here: https://www.bankid.com/en/foretag/secure-start.

Banks merger

Two Savings Banks - Åtvidabergs Sparbank (Clearing 8021-8) & Tjustbygdens Sparbank AB (Clearing 8422-8) will be merged into Sparbanken Spira AB. The merger is planned for the 17-19th October. The technical merger might affect some services in PSD2 API related to tokens, consents and future dated payments.

Now:

8422 Sparbanken Spira AB (Tjustbygdens Sparbank AB)

8021 Sparbanken Spira AB (Åtvidabergs Sparbank)

Will be after the merge:

8422 Sparbanken Spira AB

Following services in PSD2 API will be affected:

  • Active tokens in the bank 8021 will be invalidated so that new token can get new bankid;
  • If TPP has stored account list – then it has to be updated;
  • Bankid list will be updated accordingly to remove bankid 8021 (endpoint /psd2/available-bankids);
  • Paymentid for dated payments won’t be affected;
  • Payment initiation service may have limitation during migration day.

Baltics

Instant payment limit

From 9 October 2025, the Instant Payment Regulation (EU 2024/886) enters into force. SEPA Instant Credit Transfer limits will be introduced. Instant payment limit can be set by customer in Remote Banking Services Agreement and those limits will be applicable for Instant payments initiated in any digital channel including PSD2 API.