Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
FREEDOM251

Freedom251 › Blog › Account Security

How to Revoke Open Banking, API, and Connected-App Access to Your Account

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

To remove a connected service, sign in to your bank through its official app or website and open Connected apps, Open Banking, Third-party access, Manage consents, or an Authorisation dashboard. Select the provider, check the accounts, data scopes, payment permissions, and expiry date, then choose Cancel consent, Withdraw, or Revoke access. Withdraw the connection in the provider’s app or website too. If you ever typed your bank username and password into the service, changing the password at the bank is more urgent than ordinary consent cancellation: enable two-factor authentication, inspect security alerts and transactions, and contact the bank through an official channel if anything is suspicious.

Revocation should stop continuing API calls, but it does not automatically erase information the provider already copied, cancel a subscription or loan, or prevent you from authorising the same service again later. Those are separate actions.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How do I revoke an open-banking or connected-app consent?

Use the bank’s own consent-management screen, confirm the exact provider and permissions, and save proof that the status changed. The names differ by bank, country, and account type, but the underlying process is consistent.

  1. Start at the official bank channel. Open the bank’s mobile app or type its known website address yourself. Do not follow a link in an unexpected email, text message, or social-media message.
  2. Find the access page. Search Settings, Security, Privacy, or Help for Connected apps, Open Banking connections, Third-party permissions, Access & Consent, Manage open banking consents, or Authorisation dashboard.
  3. Open the provider record. Confirm the legal or trading name, the linked account numbers, the date granted, the expiry date, and whether the connection can read balances, read transaction history, verify an account, or initiate payments.
  4. Cancel the consent. Choose Cancel consent, Withdraw, or Revoke access, then approve the confirmation prompt.
  5. Record the result. Check that the status reads cancelled, revoked, or expired. Save a confirmation screen, reference number, or confirmation email.
  6. Repeat the withdrawal in the provider’s service. In the budgeting, accounting, lending, or payments app, open its bank-connections or privacy settings and remove the account there as well.

Open Banking UK says customers choose which apps can access their data and for how long, and can cancel through the app, website, or bank. HSBC describes cancellation as taking effect immediately. A documented path at The Co-operative Bank is Settings → Manage open banking consents → provider → Action → Cancel consent. Your bank may use different labels or place the control under a support page instead.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Which bank menu names should I look for?

There is no universal label. Try the following terms in the bank’s settings search, help centre, or account-support area:

  • Connected apps or Connected services
  • Open Banking Connections or Open Banking consents
  • Third-party access or Third-party permissions
  • Manage consents, Manage access, or Access & Consent
  • Authorisation dashboard, Data sharing, or Privacy permissions

HSBC uses Open Banking Connections. Oracle’s consent-management documentation uses Access & Consent → Revoke Access. These examples illustrate naming differences rather than a single industry-standard path.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Should I revoke access at the bank, in the app, or in both places?

Do both whenever possible. The bank-side action controls the bank’s consent or token, while the provider-side action tells the service to stop trying to use the connection and removes it from the service’s account list.

Comparison point Bank-side revocation Provider-side withdrawal
Primary control Disables the bank’s consent and should revoke or expire the access token. Stops the service using the connection and removes or disconnects its feature.
Confirmation Often shows a cancelled, revoked, or expired status in the dashboard. May show a disconnected account or explain which features will stop.
Historical data Does not necessarily erase data already delivered to the provider. Does not necessarily erase copies already stored by the provider.
Credential exposure Does not fix a password that was shared with the service. Does not fix a password that was shared with the service.
Payment risk Lets you inspect and disable payment-initiation permission where the bank exposes it. Lets you remove the payment feature, but you should still check the bank’s transactions and payment settings.

If one side is unavailable, complete the other and contact the bank or provider for written confirmation. A bank-side status change is especially important when the service is no longer operating, because the bank then has a direct record that the consent was cancelled.

How does revocation work for an API or OAuth-style connection?

For regulated account-information and payment-initiation services, the consent record and access token are the practical control points. Open Banking UK’s Account and Transaction API Profile v4.0 states that a customer may revoke consent at any time; the provider must cease API access and communicate the cancellation to the bank, while a bank-side revocation should revoke or expire the access token.

Rank #2
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Account-information connections

An account-information connection may read balances, transaction history, account details, or statements. After the consent is cancelled, new API calls should be rejected. Existing exports, reports, or cached records are a separate data-retention issue.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Payment-initiation connections

A payment-initiation consent can let a service prepare or submit a payment, depending on the scope you approved. When revoking, inspect the bank record for payment permissions and review recent and scheduled payments, beneficiaries, and new payees. Stopping data access does not by itself reverse a payment that was already authorised or settle a contractual obligation.

Non-bank APIs and developer integrations

For a general API, look for Authorised apps, Developer tokens, API keys, Sessions, or Connected services. Revoke each token or integration separately rather than assuming one switch covers every project, then rotate any secret that might have been exposed. API operators use different labels and may not provide the same immediate-revocation guarantee as a regulated banking consent, so verify the token’s status after saving the change.

What if I gave an app my bank username and password?

Treat the credentials as compromised. A consent-based bank redirect is different from entering your bank login into an aggregator: a service holding the credentials may have access comparable to yours and could continue using them even after you stop opening the app.

  1. Open the bank directly, not through the connected service, and change the password.
  2. Enable two-factor authentication if the bank offers it.
  3. Review recent sign-ins, security alerts, device and browser sessions, and remembered devices.
  4. Check scheduled payments, beneficiaries, new payees, transfers, and any transaction the service could have initiated.
  5. Confirm that your email address, phone number, notification preferences, and forwarding rules have not been changed.
  6. Contact the bank using the number printed on your card or an address you type manually from the bank’s official website if you see an unauthorised payment or cannot identify the access.

Bank of America advises changing the bank password when credentials were shared, keeping contact details current, enabling additional authentication, and monitoring alerts. Do not merely delete the budgeting or financial app; deleting it does not change a password that another party may still know.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Does revoking access delete the data the app already received?

No. Revocation stops ongoing access; it is not an erasure command. A provider may retain transaction history, account identifiers, reports, audit records, or other information already received under its privacy and retention rules.

Request deletion separately

Use the provider’s privacy, account, or data-rights channel to request deletion of information that is no longer required. Ask what categories will be deleted, what must be retained for legal or fraud-prevention reasons, and when the deletion will be completed. Keep the request and the provider’s response.

Understand what revocation does not cancel

Disconnecting a data feed does not automatically cancel a paid subscription, loan, repayment plan, switching service, or other contract. Cancel those arrangements through the contractual provider and continue any payment obligation until it confirms otherwise. Similarly, removing a connection does not undo a direct debit, standing order, or payment that you separately authorised.

Expect reconnection to be possible

Revocation is reversible in the practical sense that you can start a new authorisation later. A provider may ask you to authenticate with the bank again and receive a new token; that is a new consent, not a restoration of the old one.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How can I check that a connected provider is legitimate?

Open Banking UK says open-banking access is explicit rather than automatic and directs UK customers to its directory or the Financial Conduct Authority register to check whether a provider is authorised or registered. Which? explains that banks should show an authorisation dashboard listing firms and the permissions granted.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
  • Match the provider’s legal entity, not just its app name, with the bank’s consent record.
  • Check the regulator or registration status for your country.
  • Read the requested data categories and whether payment initiation is included.
  • Check the duration, expiry date, and renewal wording.
  • Read the privacy and retention policy, including deletion and subcontractor provisions.
  • Stop if the service asks you to type bank credentials into its own form instead of redirecting you to the bank’s authentication page.

If the provider’s name is unfamiliar, do not approve first and investigate later. Ask the bank which legal entity owns the consent record and use an independently obtained support number.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What should I do if I cannot find the consent or cancellation fails?

Work through the failure in this order so that an interface problem does not become an access or payment problem.

The menu is missing

  • Update the official bank app and try the web-banking site; some institutions expose consent management in only one channel.
  • Search for each of the alternate labels listed above.
  • Check every eligible account profile, because a personal, joint, business, or regional login may have separate dashboards.
  • Contact the bank through its official support route and ask specifically for the open-banking or third-party-consent team.

The cancel button errors or the status does not change

  • Record the provider name, account, time, error message, and any reference number.
  • Retry from the bank’s website or app rather than a saved deep link.
  • Ask the bank to revoke or expire the consent and token manually, then request confirmation in writing.
  • Use the provider’s withdrawal control as well, but do not treat its confirmation as proof that the bank token was disabled.

The app still displays new data

First check whether the displayed information is a cached report with an earlier timestamp. If new transactions appear after the bank confirms revocation, contact both organisations immediately and ask which token, account, or integration is still active. For a non-bank API, inspect every project, key, session, and environment rather than just the first integration shown.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You see an unfamiliar transaction

Use the bank’s fraud or unauthorised-payment process immediately. Revoke the connection, change credentials if they were ever shared, preserve screenshots and timestamps, and do not wait for the provider to investigate before notifying the bank.

What should I verify after revocation?

A short post-revocation check confirms that you stopped access rather than merely hiding the app.

  • The bank dashboard shows cancelled, revoked, or expired.
  • The provider’s account-connection page shows disconnected or removed.
  • No active token, API key, session, or integration remains in the relevant service.
  • Payment-initiation permissions, scheduled payments, beneficiaries, and recent transactions are understood.
  • Any password that was shared has been changed at the bank, and two-factor authentication is enabled.
  • A separate data-deletion request has been submitted if you need historical information removed.
  • Any subscription, loan, direct debit, or other contract has been cancelled separately where required.
  • Confirmation records are stored somewhere you can retrieve them later.

Do banks in every country handle connected-app access the same way?

No. The concepts are widely similar, but menu names, regulatory registers, consent durations, payment rules, and support procedures vary by country and institution. The immediate-cancellation statements from Open Banking UK and HSBC describe their services and UK open-banking context, not a universal promise for every bank worldwide.

Use the terminology shown by your own bank, read the consent screen before approving or cancelling, and ask the bank which permissions were actually granted. In a joint or business account, another authorised user may have created a separate consent, so check all relevant account profiles.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What is the safest sequence when stopping an unused financial app?

For a normal consent-based connection, cancel at the bank, withdraw in the provider, verify both statuses, and then request deletion if required. If credentials were shared or any activity looks suspicious, change the bank password and secure the account first, then complete the consent and provider-side cleanup.

  1. Identify the provider and the permissions from the bank’s dashboard.
  2. Secure the bank account immediately if credentials were exposed or activity is suspicious.
  3. Cancel the bank consent and save confirmation.
  4. Disconnect the provider-side account and revoke any related API keys or sessions.
  5. Review payments, beneficiaries, alerts, and sign-ins.
  6. Submit a separate deletion request and cancel any unrelated contract or subscription.

Frequently Asked Questions

Will revoking an app connection stop my direct debit?

Not automatically. A direct debit is a separate payment instruction, so review it in the bank’s payments area and cancel it through the appropriate mandate process if that is what you intend.

Do I have to revoke access separately on every phone or computer?

The bank consent is generally tied to the account relationship, not a particular device. Still, sign out unknown devices and remove saved sessions in the provider and bank security settings when you are dealing with suspected credential exposure.

How can I prove that a provider no longer has access?

Keep the bank’s cancellation confirmation, the provider’s disconnection notice, and the date and time of both actions. If the bank offers an authorisation dashboard, capture the entry after it changes to cancelled, revoked, or expired.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can a bank employee revoke an unknown consent for me?

Usually the bank can investigate and disable a consent after verifying your identity, even when you cannot locate the dashboard entry. Ask for the provider’s legal name, linked accounts, permissions, and token status, and request written confirmation of the action.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Account SecurityAPI accessconnected appsOAuthopen banking

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.