# Notice of Change – Open Banking Improvements: CMA9 v4 API – Santander Bank UK

Issued: 06th January 2026 | TB-1631

Updated: 23rd of March 2026

**What has changed:** Activation date has been changed from 30 March 2026 to 25 March 2026

**Why has this changed:** We are lowering the associated risk of this change by performing the change earlier than originally planned. The original date is expected to be a high traffic date. The original date is very close to the cut off date to complete the work.

![AIS/PIS](/assets/ais-pis.cae356edcd7b630129229253e3a0506c39dcffc674bb5faf5e999e6c348f1e84.25996077.png)

## What's Changing?

Santander Bank UK will migrate to **CMA9 v4**.

As part of this migration:

- Santander will introduce **dedicated endpoints** for:
  - Retail (Personal)
  - Business
  - Corporate
- **All existing v3 customer consents will become invalid** after the migration to CMA9 v4.


Changes associated with CMA9 v4:

### PIS

- Bank raw responses are changing
- PCC codes are changing
- Improved error messaging


### AIS

- Changes to Balance Type Identifiers


## Does This Change Affect You?

### Payment Initiation Services (PIS)

You **may be impacted** if:

- You do not implement changes to account for the new bank IDs for Santander Business and Corporate branches.
- You are initiating payments with banks using the UK Open Banking API standard, and your PIS integration relies on raw bank statuses.
- You depend on specific bank error messages in your processes.


You are **not impacted** if:

- You do not rely on raw bank responses.


### Account Information Services (AIS)

You **may be impacted** if:

- You are making AIS calls to banks using the UK Open Banking API standard, and you validate balance types in your AIS integration.


You are **not impacted** if:

- You do not validate balance types in your AIS integration.


## Changes in Detail

### General

Santander will introduce **dedicated brands and endpoints** for Personal, Business, and Corporate customers.

Three bank endpoints will be available:

- **Santander Personal** — `ob-santander`
- **Santander Business** — `ob-santander-bus`
- **Santander Corporate** — `ob-santander-corp`


> **Note:**
Due to the migration to new dedicated brands, **all customer v3 consents will be invalidated**.


## Payment Initiation Services

### Standardised Payment Statuses

The `bankPaymentStatus` field will now return **ISO 20022** standard payment status codes.

> ❗ **Note:** Token’s own status codes will remain unchanged.


If you have designed your implementation for raw bank statuses, you must decide how to handle the ISO 20022 version.

- V4 status repository and diagram


#### How Token Handles v4 Statuses for APIv1

| Token Payment Status | ISO 20022 Raw Bank Payment Statuses |
|  --- | --- |
| PROCESSING | PDNG, RCVD, ACTC, PATC, ACCP, ACFC, ACSP, ACWC, ACWP, ACSC |
| SUCCESS | ACCC |
| DECLINED | BLCK, RJCT |
| CANCELLED | CANC (domestic scheduled payments) |


#### How Token Handles v4 Statuses for APIv2

| Existing Payment Statuses – v3 | New Payment Statuses – v4 |
|  --- | --- |
| INITIATION_PROCESSING | PDNG, RCVD, ACTC, PATC, ACCP, ACFC, ACSP, ACWC, ACWP, ACSC |
| INITIATION_COMPLETED | ACCC |
| INITIATION_DECLINED | BLCK, RJCT |
| INITIATION_DECLINED | CANC (domestic scheduled payments) |


### Consistent Error Messaging

Bank error messages will be updated to match the **CMA9 v4 specification** for improved clarity and consistency.

#### Affected Endpoints

##### V1 API

- `providerDetails.status`
  - POST `/transfers`
  - GET `/transfers/{transferId}`
  - GET `/transfers`


##### V2 API

- `bankPaymentStatus`
  - GET `/v2/payments`
  - GET `/v2/payments/{paymentId}`


##### VRP API

- `bankVrpConsentStatus`
  - POST `/vrp-consents`
  - GET `/vrp-consents`
  - GET `/vrp-consents/{id}`
  - DELETE `/vrp-consents/{id}`
- `bankVrpStatus`
  - GET `/vrp-consents/{id}/payments`
  - POST `/vrps`
  - GET `/vrps`
  - GET `/vrps/{id}`


### Handling of PCC Codes

Token.io currently populates the `PCC` field with a default value when none is provided.
With **CMA9 v4**, this will no longer occur.

If you would like to include a PCC, you must provide one as part of your request.

#### Affected Endpoints

##### V1 API

- POST `/token-request`


##### V2 API

- POST `/v2/payments`


> ❗ **Note:**
If you do not send a PCC or send an incorrect PCC, your request will not fail. Token will ignore invalid PCC values and the field will be empty.
While PCC is not mandatory in CMA9 v4, it is **recommended**, as the Payment Context Code is a key transaction indicator and may be validated by the receiving bank.


## Account Information Services

### Changes to Balance Type Identifiers

| Existing Balance Type Identifier – v3 | New Balance Type Identifier – v4 |
|  --- | --- |
| ClosingAvailable | CLAV |
| ClosingBooked | CLBD |
| ForwardAvailable | FWAV |
| Information | INFO |
| InterimAvailable | ITAV |
| InterimBooked | ITBD |
| OpeningAvailable | OPAV |
| OpeningBooked | OPBD |
| PreviouslyClosedBooked | PRCD |
| Expected | XPCD |


## What Action Do I Need to Take?

If you are impacted, to ensure a smooth transition we strongly recommend that you:

- Speak with your implementation manager, or
- Contact us at [support@token.io](mailto:support@token.io)


## When Will This Change Apply to All Impacted Customers?

**25th March 2026**

## Where Can I Get Further Information?

For any questions, concerns, or to discuss your integration, please speak with your implementation manager or contact:
[support@token.io](mailto:support@token.io)