There's still so many open questions though * How do I know the PISP/AISP is going to do what they say, how are they accredited? * If Spain has a very lax acc

There's still so many open questions though * How do I know the PISP/AISP is going to do what they say, how are they accredited? * If Spain has a very lax accreditation process then fraudulent PISP/AISP's will congregate there to scam other europeans - how do you stop this game of wack-a-mole when each country in the EU is defining their own system? * There's hugely complicated Strong Customer Authentication regulation that's just been released in draft adding complexity to an already complex system The problem is not _any_ arbitrary user that people are worried about, it's scams. If I approach 1000 people and 1 manage to scam one, I have access to all their financials