Important Services in Retail Banking
Which retail banking services count as important: access to deposits, cash, payments from accounts, and the support customers need when access fails suddenly.
The short answer
Retail banking services count as important when their disruption would leave customers unable to access their money, to pay for essentials, to receive income, or to obtain help when something goes wrong. The central service is access to deposits: the ability to see a balance, withdraw cash, and pay from an account. Around it sit related services that matter most when access is threatened, such as identity verification, fraud reporting, and customer support for vulnerable customers. A retail banking list should be built from what customers need to do with their money day by day, rather than from product names. A current account, a savings account, and a joint account are products; the services are the outcomes customers obtain through them, and those outcomes are what a disruption takes away.
Why is access to deposits the starting point?
Access to deposits matters because money held in an account is the means by which most people meet daily needs. If access fails, a customer may be unable to buy food, pay for transport, settle a bill, or respond to an emergency, even though the money is, in principle, still theirs. The harm is not abstract, and it does not wait for a convenient resolution. It also falls unevenly: customers with low balances, no alternative account, or reliance on cash feel a loss of access first and hardest. Digital access, branch access, telephone access, and cash access are channels to the same outcome, and a service definition should make clear whether the service is the outcome itself or one channel to it. If one channel fails but another genuinely works for the affected customers, the harm is contained; if all channels depend on the same failed system, the harm is not.
Which other retail services are commonly important?
Payments from accounts, covered in a companion guide, are a distinct service because paying differs from merely viewing or withdrawing money. Receiving income, such as salary or benefits, matters because a missed receipt can cause the same hardship as blocked access. Lending services raise a different question: a customer awaiting a mortgage decision or an overdraft facility may face a lost purchase or an unexpected shortfall, but the harm profile differs from access to existing deposits, and the services should not be merged without reasoning. Support services also deserve attention: reporting a lost card, disputing a transaction, or freezing an account after suspected fraud are services customers need urgently, often at moments of distress. A firm that can keep accounts running but cannot help customers who are locked out, defrauded, or in difficulty has protected the system while leaving the user unprotected.
How do channels and vulnerability shape the list?
Channel changes can move a service across the importance threshold. Closing branches, reducing cash access, or moving customers to a single digital channel concentrates dependence on that channel, so its failure harms more people with fewer alternatives. Customers who cannot use digital channels, who rely on cash, or who need assisted service are particularly affected, and their harm should be described explicitly rather than averaged away. Seasonal and life event peaks matter too: benefit payment days, rent days, and periods when customers travel or face emergencies all raise the stakes of a disruption. A retail banking list that ignores channels and vulnerability will look complete on paper while missing the customers most likely to be harmed in practice.
What mistakes distort a retail banking list?
A common mistake is to list products instead of services, producing a catalogue of account types that cannot be mapped, tolerated, or tested as user outcomes. Another is to treat digital access as the whole service, forgetting cash, telephone, and branch routes that some customers depend on entirely. A third is to overlook the support services that customers need during a disruption itself, such as contact, authentication recovery, and fraud reporting, which are often the first services to be overwhelmed when a main service fails. A fourth is to assume that customers hold accounts elsewhere, without evidence about the customers who do not. Each error narrows the list in a way that flatters the firm and understates user harm.
What should a retail banking list demonstrate?
A convincing list demonstrates, for each service, the customer outcome, the groups most affected by its loss, the channels through which it is reached, and the realistic alternatives if it fails. It shows how access, payment, receipt, and support services relate without merging them into one vague banking service. It names the dependencies that could block several services at once, such as a shared authentication system or a core account platform. And it records why services that were considered but excluded did not meet the harm test, so that a reviewer can see the judgement rather than merely the result. This guide is educational only, and the EU and UK regimes are labelled separately where they are mentioned.
Primary sources on the record
- Regulation (EU) 2022/2554 on digital operational resilience for the financial sector, Official Journal text on EUR-Lex.
- Financial Conduct Authority, operational resilience: the UK regime, labelled separately from DORA.
- NIST Computer Security Resource Center, CSRC: contingency planning and incident response publications, cited as practice, not law.
Legal status: Regime-dependent and labelled in the guide. DORA applies from 17 January 2025. The UK regime has its own policy statements and dates, stated separately where the guide compares regimes. Application position for this topic: DORA: from 17 January 2025. UK: see the UK line for its own dates.