Fintech
What Actually Happens When You Connect Your Bank Account With Plaid?
You click 'connect,' type your credentials, and money apps just… work. Here's the machinery underneath.
Every budgeting app, neobank, and "link your account" button hides the same piece of infrastructure. Usually it's Plaid. Here's what actually happens in the two seconds after you hit connect.
The flow, end to end
How it works
- YOU
- FINTECH APP
- PLAID LINK
- YOUR BANK
- TOKEN + ACCOUNT DATA
- BACK TO THE APP
You never hand your bank password to the app. You hand it to Plaid's Link module, which exchanges it for a token the app can use to request data — balances, transactions, account and routing numbers.
Why the token matters
{
"access_token": "access-sandbox-...",
"item_id": "item-...",
"products": ["transactions", "auth", "balance"]
}
The app stores the token, not your credentials. If the app is breached, the attacker gets a scoped, revocable token — not your online-banking login. That indirection is the entire security value proposition.
Screen-scraping vs open banking
Historically Plaid logged in as you and scraped the page. The industry is moving to bank APIs (open banking) where the bank hands out tokens directly. Same outcome for you, far more stable underneath.
How it makes money
- Customers
- Fintech apps, neobanks, lenders and financial platforms that need to read or verify bank data.
- Business model
- Usage-based fees — per linked account and per API product (transactions, auth, balance, identity).
- Why it matters
- Plaid sits between thousands of banks and thousands of apps. Every app that needs bank data would otherwise integrate each bank one by one; Plaid sells the one integration that replaces all of them.
Where's the opportunity?
Verticalized data products on top of raw bank data — cash-flow underwriting, subscription detection, income verification — are businesses of their own.
Open banking regulation expands the pipe every year, and the aggregators sitting on it compound with it.
Knowing the token/webhook model well makes you valuable to any company touching money; it's a small, high-leverage specialty.
Bank API standardization could commoditize aggregation, and regulation cuts both ways.
Key takeaway
Plaid's product isn't data — it's one connection instead of ten thousand. Any time you see a company standing between many providers and many consumers, ask what the token is and who pays to cross the bridge.
Related plumbing: how instant payments actually move money.