The buy-now-pay-later sector has spent the past five years chasing approval volumes as a proxy for growth. But the playbook is shifting. Tamara, the Riyadh-headquartered BNPL platform, has just reported a 32 per cent increase in credit approvals after integrating Lean Technologies' open banking infrastructure—a figure that speaks less to marketing prowess and more to a fundamental restructuring of how fintech lenders now assess creditworthiness. For compliance officers, payments infrastructure firms, and regulators watching the sector mature, the message is unambiguous: real-time transactional visibility is no longer a competitive feature. It is a regulatory and operational necessity.

Tamara's integration taps into Lean Technologies' standardised connectors to consumer bank accounts across the Middle East and North Africa region. Rather than relying on static credit bureau scores—often months out of date—the system ingests live account balance, income frequency, spending patterns, and repayment behaviour. This mirrors the operational logic underpinning PSD2 in Europe and similar open banking regimes globally, but applied to underwriting velocity in a market where traditional credit infrastructure remains fragmented. The result is not merely higher approval rates; it is approval decisioning compressed from hours to seconds, with deeper visibility into borrower liquidity.

What makes this noteworthy for the broader fintech ecosystem is the implications for capital efficiency and risk transfer. A 32 per cent approval lift, sustained without proportional claims-rate degradation, suggests that historical credit-rationing by legacy banks reflected information scarcity rather than genuine borrower risk. BNPL platforms have long argued this; now they have a quantified proof point. For European Central Bank-regulated entities and European Banking Authority licensed competitors, the competitive pressure is acute. A traditional bank employing solely historical credit bureau data is, by definition, operating with stale inputs. Lean's integration layer—and similar platforms such as Basiq, Tink, and Plaid in other geographies—have commoditised that data access to the point where refusing it becomes a voluntary handicap.

The regulatory surface here deserves attention. Open banking mandates in Europe and nascent frameworks in the GCC (Gulf Cooperation Council) states explicitly contemplate third-party access to account data for credit assessment. But approvals are only half the underwriting cycle. Lean and Tamara will now face heightened scrutiny around algorithmic fairness, data minimisation, and consent granularity. The EBA has published guidance on AI-driven credit decisioning; the Financial Conduct Authority in the UK is actively monitoring BNPL lending standards. A 32 per cent approval increase must be triangulated against default rates, especially among traditionally underserved cohorts. If the lift is concentrated among borrowers with stronger cash flow, it is a commercial win but a regulatory non-event. If it represents genuine financial inclusion—approval of previously unbanked or marginally-banked consumers—then both regulators and rating agencies will require evidence of responsible underwriting, not merely faster decisioning.

For BaaS platforms and embedded finance fintechs, the precedent is instructive. Wise, Revolut, and neo-bank platforms increasingly serve as BNPL origination endpoints. If they integrate live open banking feeds from their own customer accounts, they gain a competitive moat: they are no longer selling payment rails; they are selling credit decisioning at the point of transaction. This shifts the economics of the BaaS value chain. Traditional sponsor banks—JPMorgan Chase, Deutsche Bank, regional European lenders—must now compete not on deposit relationships or brand, but on real-time data integration and API latency. The sponsorship relationship is becoming commoditised.

Card issuers face similar pressure. Visa and Mastercard have both invested in open banking infrastructure and spend decisioning. But the Tamara-Lean integration suggests the locus of competitive advantage is shifting downstream—away from rails and toward underwriting. A traditional card issuer that does not surface live account data at point-of-sale or in pre-approval workflows is competing with one hand tied behind its back. This is not a technical problem; it is an organisational and regulatory one. Most legacy issuers lack the API maturity and data governance to ingest external banking feeds securely and compliantly. The next three years will separate those that do from those that don't.

The broader pattern here is instructive for fintech regulation globally. Open banking was sold as consumer empowerment and market competition. It is delivering both—but in ways the original regulatory architects did not fully anticipate. Creditworthiness, once the exclusive domain of bureaus and centralised lenders, is now radically distributed. Approval rates and lending velocity are converging toward theoretical maximums, constrained only by fraud, default correlation, and funding availability, not by information asymmetry. This is efficiency, yes. But it also concentrates tail risk: if every BNPL platform is now using identical open banking feeds and similar underwriting algorithms, correlated credit losses will be larger and more abrupt when the cycle turns. Regulators must now contend not with information scarcity, but with information homogeneity and model concentration risk. The Bank for International Settlements and the Financial Stability Board have begun work on AI and algorithmic concentration; Tamara's numbers will accelerate that agenda.

For Codego readers managing fintech compliance, payment rails, or BaaS platforms, the takeaway is operational. Open banking integration is no longer optional infrastructure—it is table stakes. Platforms without API connectors to transactional data will struggle to compete on approval velocity and credit quality simultaneously. Regulators will expect evidence not only that you can access the data, but that you have tested it for discriminatory outcomes and that you maintain genuine consent trails. The 32 per cent figure is impressive; the governance scaffolding behind it will determine whether the deal becomes a template or a cautionary tale.

Sources: The Fintech Times · 30 April 2026