Change to Revolut's /account endpoint access

Starting 18 November 2024, Revolut has introduced a restriction on access to its /accounts endpoint.

Access to this endpoint will now only be allowed for the first five minutes following a user’s consent to establish an Account Information Service (AIS) connection.

Requests to the /accounts endpoint outside this five-minute window will result in an HTTP 403 error. This change will impact integrations relying on account data retrieval after the initial SCA period.

What actions are required on your part? 

We recommend that you modify your logic when calling the /accounts endpoint to restrict them to the SCA validity period only.

Are there any alternative solutions available? 

Unfortunately, there are no alternative solutions. Any /accounts requests made outside of the initial period will yield a 403 error and may lead to connectivity issues for your users.