How Digital Banking Works

What is digital banking?

Digital banking means accessing banking services through an app or website rather than primarily through branches. Customers can open accounts, receive income, make payments, manage cards and sometimes borrow without visiting a physical location.

But an app is only the interface. Behind it sit identity checks, account ledgers, payment networks, security controls and one or more regulated institutions.

The distinction is between how a service is delivered and what the provider is authorised to do. A digital-only bank can hold the same type of banking licence as a branch-based bank. An app that looks similar may instead be operated by an electronic money institution or a technology company working with a partner bank.

That difference determines who owes you money, how funds are protected and what happens if a provider fails.

Who actually provides the account?

A licensed bank

A bank accepts deposits and can use its funding to make loans and hold other permitted assets, subject to capital, liquidity and risk-management requirements. Your account balance is generally a claim against the bank, not cash stored separately in your name.

A digital bank may develop its own technology or buy services from other firms. Outsourcing does not remove the bank’s regulatory responsibilities.

Eligible deposits may be covered by a statutory deposit protection scheme. Coverage depends on the jurisdiction, institution, depositor and account type—not whether the account has an app.

An electronic money or payment institution

Some digital accounts are payment products rather than bank deposits. An electronic money institution typically issues electronic money when it receives customer funds. Customers can then use that value for payments or request redemption under the applicable rules.

In the EU and UK, relevant non-bank payment providers must generally safeguard customer funds. Depending on the regime, this can involve segregating funds or using another permitted protection arrangement.

Safeguarding is not deposit insurance. It is designed to protect customer funds from the provider’s other creditors, but recovering money after failure can involve delays and insolvency procedures.

A platform using a partner bank

A non-bank platform may provide the app while a licensed bank supplies deposit accounts, payment access or lending. This is often called banking-as-a-service or embedded banking.

The arrangement can involve individual accounts at the bank or pooled accounts supported by records showing each customer’s entitlement. The terms should identify the account provider and explain the platform’s role.

A partner bank’s licence does not automatically cover every service offered by the platform. Investments, cryptoassets and payment balances may have different legal providers and protections.

How opening an account works

Identity and eligibility checks

Remote onboarding replaces a branch visit with electronic checks. A provider may ask for identification, an address, a selfie or video check, tax information and details about expected account use.

Business applicants may also need to provide ownership information, incorporation documents and evidence of commercial activity.

These checks support anti-money laundering, sanctions compliance and fraud prevention. Providers may compare information with official records or specialist databases and refer uncertain cases for human review.

Account opening is not necessarily instant. Residency restrictions, missing documents or complex ownership structures can require additional checks.

Creating the account record

Once approved, the provider creates records in its account system and assigns the identifiers needed to receive money. These might include an IBAN, a UK sort code and account number, or US routing and account numbers.

An account identifier does not by itself prove that you hold a bank deposit. Payment institutions can also offer identifiers that route funds to customer payment accounts.

How balances and payments work

The ledger records what you own or owe

The ledger is the accounting system behind the balance displayed in the app. It records incoming funds, payments, fees, interest and adjustments.

Providers often show both a recorded balance and an available balance. These can differ because a card payment has been authorised but not completed, a deposit is awaiting clearance, or funds are temporarily restricted.

Reconciliation compares internal records with information from banks, payment networks and processors. It helps detect missing transactions, duplicate entries and mismatches between customer entitlements and funds held elsewhere.

A card payment, step by step

Suppose you use a debit card to buy groceries:

1. The merchant sends an authorisation request through its payment provider and the card network.
2. The card issuer checks the card, available funds, security signals and account restrictions.
3. If approved, an authorisation hold normally reduces your available balance.
4. The merchant later submits the transaction for clearing, and settlement occurs between the relevant institutions.
5. The provider updates the account and releases or adjusts the hold.

The notification on your phone therefore does not necessarily mean the payment has finally settled. Hotels, fuel stations and other merchants may initially reserve an amount that differs from the final charge.

A bank transfer, step by step

For a transfer, the provider validates the instruction, performs relevant checks and routes it through a payment system or banking partner.

Domestic transfers may use instant-payment infrastructure or slower batch systems. International transfers can involve correspondent banks, currency conversion and separate domestic payment systems at either end.

Speed depends on the route, operating hours, compliance checks and receiving institution. “Instant” at the interface does not mean every underlying process is instantaneous or reversible.

How the technology fits together

A digital banking service usually combines several layers:

• Customer interface: the app or website used to give instructions and view information.
• Core account system: the ledger and rules governing balances, fees and account activity.
• Payment connections: links to card networks, transfer systems and settlement banks.
• Control systems: identity verification, fraud detection, sanctions screening and transaction monitoring.
• Operational infrastructure: hosting, access controls, backups and incident management.

Application programming interfaces, or APIs, allow these systems to exchange instructions and data. An API can connect an app to a bank, but it does not itself confer a banking licence.

Open banking uses authorised connections to share account information or initiate payments with customer permission. In the EU and UK, established frameworks include PSD2-derived rules. Coverage, consent requirements and protections vary elsewhere.

How digital banking providers earn money

A licensed bank may earn interest on loans and other assets while paying interest on deposits and other funding. It must manage credit losses, liquidity needs and operating costs.

Bank and non-bank providers may also earn revenue through:

• Account subscriptions or service fees.
• Foreign-exchange charges or conversion margins.
• A share of card transaction fees, where permitted.
• Lending, overdrafts or credit services within their permissions.
• Fees for business tools and payment processing.

A non-bank payment provider cannot simply treat safeguarded customer money as unrestricted funding for loans. Any lending activity must fit its legal permissions and the applicable funding restrictions.

“Free” accounts can still carry charges for particular services. Compare withdrawal fees, exchange-rate terms, transfer costs and charges triggered by account use.

What changes across jurisdictions?

European Union

EU banks operate under banking rules, with eligible deposits protected through national deposit guarantee schemes. Payment institutions and electronic money institutions operate under distinct frameworks, including PSD2 and EMD2.

An authorisation in one member state may support cross-border services through passporting, subject to the relevant conditions. Check the legal entity, home regulator and applicable protection scheme. MiCA authorisation for cryptoasset services is not a banking licence or a guarantee that token balances are insured deposits.

United Kingdom

UK banks are authorised by the Prudential Regulation Authority and regulated by both the PRA and Financial Conduct Authority. Payment and electronic money institutions fall under separate FCA regimes.

Eligible bank deposits may receive Financial Services Compensation Scheme protection. E-money and payment accounts generally rely on safeguarding instead. The FCA register helps identify the firm and its permissions; check deposit protection separately.

United States

Digital services may come from chartered banks or non-bank fintech firms partnering with banks. Eligible deposits at FDIC-insured banks can receive deposit insurance within the scheme’s rules and limits.

For pooled arrangements, pass-through coverage depends on legal ownership, records and other requirements. FDIC insurance protects against an insured bank’s failure, not the failure of a non-bank app provider itself. State money-transmitter licensing is not equivalent to a bank charter.

Switzerland

FINMA supervises banks and other authorised financial institutions. Its fintech licence permits a narrower deposit-taking model subject to specific restrictions; it is not a full banking licence.

Deposits accepted under the fintech licence are not covered by Swiss deposit insurance. For any Swiss provider, check the exact licence category and the disclosures explaining customer protection.

United Arab Emirates

The Central Bank of the UAE regulates banks and relevant payment activities within its remit. The Dubai International Financial Centre and Abu Dhabi Global Market have separate financial-services regulators: the DFSA and FSRA respectively.

An authorisation in a financial free zone does not automatically permit every activity throughout the UAE. Verify the provider’s permitted services, contracting entity and customer-fund arrangements rather than assuming protections match those overseas.

Singapore

The Monetary Authority of Singapore regulates banks and payment service providers under different frameworks. A digital banking licence is distinct from a licence under the Payment Services Act.

Eligible deposits at deposit insurance scheme members can receive protection under the scheme’s conditions. Payment balances should not be assumed to have the same coverage. Check the institution’s status and the treatment of the specific product.

Rules and implementation details can change. Consult the relevant regulator and protection scheme before relying on a provider’s description.

Security, complaints and practical checks

Digital providers use controls such as device registration, multi-factor authentication, encryption and transaction monitoring. These reduce risk but cannot eliminate scams, account takeover or operational outages.

Keep devices updated, protect your recovery channels and verify unexpected payment requests independently. Never disclose a one-time security code to someone claiming they need it to secure your account.

Before choosing a service, establish:

• Who contracts with you: the app brand, bank or payment institution?
• What you hold: a deposit, e-money balance, investment or another claim?
• What protection applies: deposit insurance, safeguarding or neither?
• How you access support: especially during a blocked payment or lost-phone incident.
• How complaints escalate: including any eligible ombudsman or dispute-resolution route.
• What happens during disruption: whether you can access funds through another channel.

Digital banking changes the delivery channel, not the need to understand the underlying institution. The most useful question is not simply whether an app is convenient, but who holds your money, under which rules, and how you can recover or move it when something goes wrong.