BEMO Europe – Banque Privée provides a dedicated interface that lets authorised third-party providers access the payment accounts of its customers held in Luxembourg and at its Paris branch, with their consent, as required by the Payment Services Directive (PSD2) and Commission Delegated Regulation (EU) 2018/389.

15 October 2026: documentation and testing facility (sandbox) available.
15 April 2027: production interface open to authorised providers.

Services

• Account information (AIS): payment accounts, balances and transactions, for account information service providers (role PSP_AI).


• Confirmation of the availability of funds (PIIS): a yes / no answer, for card-based payment instrument issuers (role PSP_IC).

Payment initiation is not offered: BEMO Europe's online banking does not allow customers to initiate payments online.

The interface follows the Berlin Group NextGenPSD2 framework. Customers authenticate on BEMO Europe's own login page with strong customer authentication (password and one-time code); providers use the OAuth 2.0 authorisation code flow with PKCE.

Documentation

• Get started guide (from the first sandbox call to a live connection: authorisation, consents, calls, rules and limits): BEMO-PSD2-Get-started-guide.pdf


• OpenAPI specification (all endpoints, parameters and error codes): psd2-ais.yaml


• Sandbox kit (example test certificates, Postman collection, quick-start scripts): bemo-psd2-sandbox-kit.zip

Sandbox

The sandbox runs the same software and the same customer login as production, on fictitious data only. It is open to any developer: no authorisation by a competent authority is needed.

• API (mutual TLS): https://ebanking-test.bemo.lu:19083


• Authorisation server: https://ebanking-test.bemo.lu:19080/realms/SANDBOX


• Status: https://ebanking-test.bemo.lu:19083/health

To request access, write to psd2@bemo.lu with your company name and a technical contact. You will receive the sandbox client credentials and a personal test customer.

Production

From 15 April 2027 at https://psd2.bemo.lu. No contract and no manual onboarding are required.

• Authorisation or registration as an account information service provider and / or card-based payment instrument issuer, visible in the EBA register.


• A qualified website authentication certificate (QWAC) with the PSD2 attributes of ETSI TS 119 495, presented over mutual TLS on every call.


• Your application registers itself with that certificate (POST /v1/tpp-registrations) and receives its credentials at once.

Paris branch

The payment accounts held at BEMO Europe's Paris branch are accessed through a separate instance of the same interface: same specification, same rules, same sandbox. Only the production addresses differ:

• Accounts held in Luxembourg: API https://psd2.bemo.lu, authorisation server https://ebanking.bemo.lu:17081/realms/EBANKING


• Accounts held at the Paris branch: API https://psd2-fr.bemo.lu, authorisation server https://ebanking.bemo.lu:17081/realms/FR

Both instances open on 15 April 2027. Register your application once with each instance, with the same qualified certificate.

Changes, availability and support

• Changes to the interface are announced on this page at least 3 months before they take effect, except in emergencies.


• Planned maintenance and incidents are announced on this page.


• Statistics on the availability and performance of the dedicated interface and of the customer online banking are published here every quarter, from the first quarter after the production launch.


• Support: psd2@bemo.lu. Please always give the X-Request-ID of the call concerned.

Announcements

19 October 2026: documentation of the interface for the accounts held at the Paris branch (specification version 1.2.3, Get started guide version 1.1). Opening on 15 April 2027, like the Luxembourg accounts.

15 October 2026: publication of the documentation (specification version 1.2.2) and opening of the sandbox.

Last updated: 19 October 2026.