Access end user acount information through OAuth

Goal of this tutorial

In this tutorial we'll walk you through the steps to get access to a bunq users bank account. We'll register your application, create a OAuth client and set it up in such a way so that:

• You can generate a QR code - this QR code can be used by a bunq user to connect to the app you're building

• How to set up that connection between the bunq user and your app

• Retrieve end-user information

For OAuth to work there are 3 parties involved

• The bunq user - that is likely also a user of your app

• Your app - that is trying to access information about the end users' bunq account

• bunq - which stores all the information in our database and that your app wants to access on behalf of a end user.

A common example for a usecase with oauth is if your app is an accounting tool. You want to be able to read transactions on the account of the end user. Connecting through oauth helps you get this set up.

At the end of this tutorial you'll have:

• An app with oauth client

• A way to retrieve payments on behalf of other users

What is OAuth

OAuth 2.0 is an industry-standard protocol that allows third-party applications to securely access bunq user accounts without exposing credentials. This method enables seamless authorization while maintaining user control over permissions.6

Important Note If you, as a developer, intend to access data belonging to other bunq users (e.g., account information, transaction history, or initiate payments on their behalf), you must ensure that you:

• ✅ Fully comply with bunq’s Terms and Conditions for API usage.

• ✅ Obtain explicit user consent as required.

• ⚖️ May be subject to PSD2 regulations, including registration as an AISP (Account Information Service Provider) or PISP (Payment Initiation Service Provider) with your national competent authority.

Misuse or non-compliance may lead to access being revoked or legal consequences.

What is next

Next up we'll get started with setting up the OAuth client.