The changes come into effect starting 7 April 2025 and will impact the expiry date of all new access tokens issued for account access consents.

The changes will apply to all consent authorisation flows and endpoints. This will affect both existing and new consents.

The changes do not apply to authorisation URLs to which TPPs redirect their users for consent authorisation.

Following the feedback we received, we’ve clarified the scope of URL changes:

The subdomain change applies only to API endpoints used by TPPs' applications. It does not apply to OAuth authorisation URLs to which TPPs redirect their users for consent authorisation. The authorisation URLs will remain unchanged:

• Production: https://oba.revolut.com/ui/index.html
• Sandbox: https://sandbox-oba.revolut.com/ui/index.html

Several endpoints will no longer be accessible after the first 5 minutes from PSU authorisation. This will affect both existing and new consents.