OB-VRP-25000 banking config_error ai_generated partial

AI tells a UK fintech that Variable Recurring Payments (VRP) have no transaction limits, ignoring the CMA9 regulated maximum of £25,000 per payment under the Open Banking Standard

ID: banking/uk-open-banking-vrp-limit

Also available as: JSON · Markdown · 中文
80%Fix Rate
87%Confidence
1Evidence
2024-09-10First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
Open Banking Standard v3.1.8 active — — —
PSD2 Regulatory Technical Standards (RTS) active — — —
CMA9 VRP Mandate 2023 active — — —
OBIE VRP Implementation Guide v1.2 active — — —

Root Cause

The CMA9 (Competition and Markets Authority) mandate for VRP under the UK Open Banking Standard (OBIE v3.1.8, 2023) caps each VRP payment at £25,000 for authorised push payments; this limit is enforced by ASPSPs (Account Servicing Payment Service Providers) per PSD2 regulatory technical standards.

generic

中文

根据英国开放银行标准（OBIE v3.1.8，2023），CMA9（竞争与市场管理局）对 VRP 的授权规定每笔授权推送付款的 VRP 付款上限为 25,000 英镑；该限额由 ASPSP（账户服务支付服务提供商）根据 PSD2 监管技术标准强制执行。

Official Documentation

https://www.openbanking.org.uk/providers/standards/vrp/

Workarounds

  1. 90% success For payments above £25,000, use a one-off payment via the domestic payment API instead of VRP. Example: `POST /payments/domestic-payments { "amount": 30000, "currency": "GBP", "creditorAccount": { "accountNumber": "12345678", "sortCode": "12-34-56" } }` 
    For payments above £25,000, use a one-off payment via the domestic payment API instead of VRP. Example: `POST /payments/domestic-payments { "amount": 30000, "currency": "GBP", "creditorAccount": { "accountNumber": "12345678", "sortCode": "12-34-56" } }`
  2. 75% success Split the large payment into multiple VRP payments under £25,000 each, spaced by at least 1 minute to avoid rate limiting. Example: `for i in {1..3}; do curl -X POST https://api.bank.com/vrp -d '{"amount": 20000, "currency": "GBP"}'; sleep 60; done` 
    Split the large payment into multiple VRP payments under £25,000 each, spaced by at least 1 minute to avoid rate limiting. Example: `for i in {1..3}; do curl -X POST https://api.bank.com/vrp -d '{"amount": 20000, "currency": "GBP"}'; sleep 60; done`
  3. 30% success Contact the bank's Open Banking team to request a higher VRP limit for specific commercial agreements (possible for non-CMA9 banks or custom arrangements) 
    Contact the bank's Open Banking team to request a higher VRP limit for specific commercial agreements (possible for non-CMA9 banks or custom arrangements)

中文步骤

  1. 对于超过 25,000 英镑的付款，请使用国内付款 API 进行一次性付款，而不是 VRP。示例：`POST /payments/domestic-payments { "amount": 30000, "currency": "GBP", "creditorAccount": { "accountNumber": "12345678", "sortCode": "12-34-56" } }`
  2. 将大额付款拆分为多笔低于 25,000 英镑的 VRP 付款，每笔间隔至少 1 分钟以避免速率限制。示例：`for i in {1..3}; do curl -X POST https://api.bank.com/vrp -d '{"amount": 20000, "currency": "GBP"}'; sleep 60; done`
  3. 联系银行的开放银行团队，请求为特定商业协议提高 VRP 限额（对于非 CMA9 银行或定制安排可能可行）

Dead Ends

Common approaches that don't work:

  1. 70% fail

    Setting VRP limit to £50,000 in the consent request — the ASPSP rejects with error code 'OB-AMT-EXCEEDED' because the CMA9 cap is hardcoded in the bank's API

  2. 50% fail

    Using multiple VRP consents to bypass the limit — each consent still has the same £25,000 cap per payment, and cumulative daily limits may apply per PSU

  3. 65% fail

    Implementing VRP as a domestic payment via Faster Payments — Faster Payments has its own £1,000,000 limit but VRP is a separate payment type with different API endpoints and constraints