Connect UnionBank Online accounts, statements and payment rails to your stack — safely
UnionBank Online (package com.unionbankph.online) is the mobile bank of UnionBank of the Philippines, the lender that built the country's largest API developer portal — over 600 published APIs and around 40 million calls a month. We turn that surface area, plus authorized app protocol analysis, into clean integrations: account login mirroring, balance and transaction queries, statement export, and InstaPay / PESONet / PDDTS transfer hooks, all following Open Banking patterns.
Why this app's data is worth integrating:
- Transaction-grade data — real-time savings, checking and debit/ATM card activity, plus credit-card spend, points and statement lines you can reconcile.
- Balances and account inventory — every deposit account and credit-card balance in one view, ideal for cash-position dashboards and net-worth tooling.
- Payment-rail context — InstaPay, PESONet, PDDTS USD transfers, biller payments, scheduled/recurring payments, remittance-center sends and QR pay-or-request events that feed treasury and reconciliation systems.
What we deliver
Every engagement ships a working integration plus the paperwork your security and audit teams will ask for. You get an OpenAPI specification, a written protocol and authorization-flow report (OAuth2 scopes, token lifetimes, OTP and biometric step-up, cookie/session chain), runnable client source in Python or Node.js, a test suite with sandbox fixtures, and a compliance brief that maps each data field to a lawful basis and a retention window. Nothing is a black box — you can run, read and extend all of it.
Deliverables checklist
- API specification (OpenAPI / Swagger) for login, balances, statements, transfers
- Protocol & auth-flow report (OAuth2 scope chain, OTP/biometric step-up, token refresh)
- Runnable source for login + statement + transfer APIs (Python / Node.js)
- Automated tests, sandbox fixtures and Postman/Insomnia collection
- Compliance guidance (BSP Open Finance alignment, Data Privacy Act 2012, KYC/consent logs)
- Webhook receiver samples for posted transactions and payment status callbacks
Engagement models
- Source-code delivery from $300 — runnable API source plus documentation; pay after delivery once you are satisfied.
- Pay-per-call API billing — hosted endpoints, billed only per call, no upfront cost; suited to teams that prefer usage-based pricing.
- Optional retainer for upkeep when the app changes its protocol or the developer portal versions its APIs.
Recent app context we track
In September 2025 UnionBank rolled out Mobile Tap to Pay (NFC) in the app, letting users pay at Visa contactless terminals with an NFC Android device linked to a UnionBank Visa debit or credit card. The February 2025 release (v2.55.0) added supplementary-cardholder self-onboarding, supplementary-card sublimits, biometric load/bills purchases, and in-app customer-service ticket tracking, alongside earlier video-KYC account opening aimed at GenZ users. We keep integrations aligned with these changes so token scopes and payloads do not drift.
Data available for integration (OpenData perspective)
The table below maps the data UnionBank Online exposes through its app and the UnionBank developer portal to the screen or feature it comes from, its granularity, and what teams typically do with it. Everything here is accessed under customer authorization or via documented public/partner APIs — we do not bypass authentication.
| Data type | Source (screen / feature) | Granularity | Typical use |
|---|---|---|---|
| Account list & balances | Dashboard — savings, checking, debit/ATM, Savings+, PlayEveryday | Per account, current + available balance, currency | Cash-position dashboards, net-worth tools, treasury sweeps |
| Transaction history | Account activity / statement view | Per posting: date, amount, channel, counterparty, reference, running balance | Accounting sync (ERP), reconciliation, expense analytics |
| Credit-card data | Cards — spend, points, statements, limits | Per card: outstanding, statement lines, reward points, sublimits | Spend reporting, rewards tracking, dispute workflows |
| Fund-transfer records | InstaPay / PESONet / intra-bank / PDDTS / remittance sends | Per transfer: rail, amount, fee, status, beneficiary, timestamp | Payment reconciliation, settlement reporting, audit trails |
| Bills payment history | Pay bills — utilities, telco, rent, school, government | Per payment: biller, account ref, amount, schedule, status | AP automation, recurring-payment monitoring, cash forecasting |
| Goals & PlayEveryday | Goals savings, leaderboard, points | Per goal: target, progress, contributions; gamified rank/points | Personal-finance coaching, engagement analytics |
| Payment requests & QR | Request payment / split bill / personal QR | Per request: amount, requester, payer mobile, QR payload, status | Collections, peer settlement, merchant micro-acquiring |
| FX rates & conversions | USD/PHP conversion, real-time FX view | Rate snapshots, executed conversion records | FX exposure tracking, rate-alerting, multi-currency books |
Typical integration scenarios
These are end-to-end flows we build most often. Each names the data and API in play and how it maps to OpenData / OpenFinance.
1 — Accounting & ERP reconciliation
Context: a Manila SME wants UnionBank deposit and credit-card activity to land in Xero/SAP without manual CSV exports. Data/API: GET /accounts for balances, POST /statement with from_date/to_date for postings, plus a webhook for new transactions. OpenFinance mapping: account-information access under explicit customer consent, exactly the "AISP" pattern in BSP's Open Finance Framework — read-only, scoped, revocable.
2 — Disbursement & payroll automation
Context: a marketplace pays hundreds of sellers and gig workers daily. Data/API: Partner InstaPay / PESONet transfer endpoints (developer portal), batch submit + status callback; reconcile against the transfer-records dataset. OpenFinance mapping: payment-initiation on regulated rails (InstaPay real-time, PESONet batch), with per-transaction references for downstream audit.
3 — Treasury & multi-bank cash dashboard
Context: a finance team aggregates UnionBank alongside other PH banks into one liquidity view. Data/API: balances + transaction feed normalized to a common schema; FX snapshots for USD sub-accounts via PDDTS context. OpenFinance mapping: account aggregation — the page's "UnionBank Online statement API integration" feeding a treasury data lake.
4 — Collections & request-to-pay
Context: a tutoring business collects fees from parents via UnionBank Online's request-payment and personal-QR features. Data/API: create payment request by mobile number, generate QR payload, poll/receive status webhook; tie settlements back to invoices. OpenFinance mapping: request-to-pay overlay on InstaPay, surfaced as an API your billing system calls.
5 — Compliance & transaction-monitoring export
Context: an AMLA-covered entity needs a tamper-evident copy of transfers and bills payments for monitoring. Data/API: scheduled statement + transfer-record pulls, hashed and written to immutable storage with consent metadata. OpenFinance mapping: consented data sharing with a data-minimization filter, retaining only fields the monitoring rules require.
Technical implementation
Below are representative request/response shapes — an OAuth2 token exchange, a statement query with paging, and a payment-status webhook. Real field names follow the UnionBank developer portal contracts and the app's observed protocol; auth uses scoped bearer tokens with OTP/biometric step-up where the bank requires it.
1) OAuth2 token exchange (partner scope)
POST /v1/oauth2/token
Content-Type: application/x-www-form-urlencoded
grant_type=client_credentials
&client_id=<APP_KEY>
&client_secret=<APP_SECRET>
&scope=accounts:read statements:read transfers:write
200 OK
{
"access_token": "eyJhbGciOi...",
"token_type": "Bearer",
"expires_in": 1800,
"scope": "accounts:read statements:read transfers:write"
}
// Customer-context calls add an x-otp / device-binding header
// after the in-app OTP + biometric step-up completes.
2) Statement query (paged)
POST /api/v1/unionbank/statement
Authorization: Bearer <ACCESS_TOKEN>
Content-Type: application/json
{
"account_id": "PH-UBP-00123456789",
"from_date": "2026-04-01",
"to_date": "2026-04-30",
"channel": ["INSTAPAY","PESONET","BILLS","CARD"],
"page": 1, "page_size": 100
}
200 OK
{
"account_id": "PH-UBP-00123456789",
"currency": "PHP",
"opening_balance": 18450.22,
"closing_balance": 21190.05,
"page": 1, "pages": 3,
"transactions": [
{ "posted_at":"2026-04-03T09:14:00+08:00",
"amount": -1500.00, "type":"INSTAPAY_OUT",
"counterparty":"J. Dela Cruz", "ref":"IP-7F2A11",
"fee": 10.00, "running_balance": 16940.22 }
]
}
3) Payment-status webhook (delivery + retry)
POST https://yourapp.example/webhooks/ubp
X-Signature: sha256=<hmac>
Content-Type: application/json
{
"event": "transfer.status",
"rail": "PESONET",
"transfer_id": "PN-9C13E0",
"status": "SETTLED", // PENDING | SETTLED | RETURNED
"amount": 25000.00, "currency":"PHP",
"beneficiary_bank":"BPI",
"occurred_at":"2026-04-04T15:02:11+08:00"
}
// Respond 2xx within 5s or the gateway retries with
// exponential backoff (max 24h). On RETURNED, reconcile
// against the original transfer record and flag the invoice.
Data flow / architecture
UnionBank Online app / developer-portal APIs → Ingestion & auth layer (OAuth2, OTP step-up, rate limiting) → Normalized store (accounts, transactions, transfers, consents) → Analytics & API output (reconciliation jobs, dashboards, your ERP, webhooks). Consent records and audit logs sit beside the store; a small scheduler drives periodic statement pulls while webhooks handle near-real-time transfer status. Three to four nodes, no exotic infrastructure required.
Compliance & privacy
Regulatory alignment
UnionBank of the Philippines is supervised by the Bangko Sentral ng Pilipinas (BSP); deposits are insured by PDIC. Our integrations are designed around BSP's Open Finance Framework (Circular No. 1122, 2021), the Philippine Data Privacy Act of 2012 (Republic Act 10173) overseen by the National Privacy Commission, AMLA record-keeping rules, and the PCI-DSS expectations that apply to card data. Cross-border deployments additionally respect GDPR-style consent where EU users are involved. We never circumvent authentication — access is by customer authorization or documented public/partner APIs only.
Privacy controls we ship
- Explicit, revocable consent capture with scope and expiry recorded per user
- Data minimization — only the fields a use case needs leave the bank boundary
- Encryption in transit and at rest; secrets in a managed vault, not in code
- Full audit trail of every API call, token issuance and webhook delivery
- Retention windows mapped to lawful basis; deletion and export endpoints for data-subject requests
- NDA and DPA templates available on request
Market positioning & user profile
UnionBank Online serves a broad Philippine retail base — salaried professionals, freelancers and online sellers, students opening their first account via in-app video KYC, PlayEveryday gamers, and overseas Filipinos sending money home — alongside corporate and partner clients who consume the bank's developer-portal APIs for disbursements and collections. It is mobile-first on Android and iOS, complemented by the web channel at online.unionbankph.com, and the bank has leaned into a younger (GenZ) segment with gamified savings and the 2025 Mobile Tap to Pay (NFC) feature. UnionBank is widely recognised as the most API-forward bank in the country (its developer portal is the largest in PH and among the largest in Southeast Asia), which makes UnionBank Online a natural anchor for OpenFinance and OpenBanking integration work in the region.
Screenshots
Tap any thumbnail to enlarge. These are the current Google Play screenshots for UnionBank Online — useful when scoping which screens map to which data feeds.
Similar apps & integration landscape
Teams that integrate UnionBank Online usually touch other Philippine banking and wallet apps too. The list below is purely ecosystem context — no ranking, no criticism — and it explains the kind of data each holds so you can plan unified exports across them.
- GCash — the dominant PH e-wallet (bills, QR pay, transfers, GSave, GInvest, GLoan); holds wallet balances and transaction logs that teams often consolidate alongside UnionBank statement data.
- Maya — wallet plus Maya Bank savings; payments, QR, crypto and high-yield deposits, frequently reconciled together with bank-account feeds.
- GoTyme Bank — digital bank with instant onboarding and debit cards; account balances and transaction histories that fit the same OpenFinance aggregation pattern.
- Tonik Digital Bank — neobank known for high-interest "Stashes" and quick loans; structured deposit and loan-repayment data useful for personal-finance tooling.
- UNOBank (UNO Digital Bank) — full-spectrum digital bank; multi-currency accounts and transfers that benefit from a normalized export schema.
- Union Digital Bank — UnionBank's own digital-bank subsidiary; savings, time deposits and cash loans that pair naturally with UnionBank Online treasury views.
- BPI Mobile — Bank of the Philippine Islands app; balances, transaction history, transfers and bills payments commonly aggregated with UnionBank in multi-bank dashboards.
- BDO Digital Banking — the country's largest bank's app; deposit and card data that finance teams want unified with other rails.
- Metrobank Mobile — accounts, cards, loan calculators and FX rates; statement exports that slot into the same reconciliation pipeline.
- RCBC Pulz — RCBC's app with QR transfers, in-app expense analyzer and convert-to-installment; transaction-level data relevant to spend analytics.
- LANDBANK Mobile — government-linked bank app with Forex/UITF rates and bills payments to 80+ merchants; useful for public-sector and payroll flows.
- Security Bank Mobile — biometric login, fee-free transfers and card management; balances and transfers that complete a PH multi-bank picture.
If you work with any of the apps above and need a single, consented transaction export across them and UnionBank Online, that consolidation is the core of what we build.
About our studio
We are an independent technical-service studio focused on app interface integration and authorized API integration for fintech. Our engineers come from banks, payment gateways, protocol-analysis teams and cloud platforms; we know BSP and National Privacy Commission expectations, the InstaPay/PESONet/PDDTS rails, and multi-region privacy rules. We ship end-to-end financial APIs under real security and compliance constraints — not slideware.
- Digital banking, payments, cards, remittance and cross-border clearing
- Enterprise API gateways, OAuth2 hardening and security reviews
- Custom Python / Node.js / Go SDKs and test harnesses
- Full pipeline: protocol analysis → build → validation → compliance → handover
- Source-code delivery from $300 — runnable API source plus full documentation; pay after delivery once satisfied
- Pay-per-call API billing — hosted endpoints, billed per call, no upfront cost
Contact
For a quote, send us the target app (UnionBank Online) and your concrete requirements — which data, which rails, sandbox or production, expected call volume. We reply with scope, timeline and price.
You only provide the app name and the requirement; we deliver the usable API or protocol implementation source code.
Engagement workflow
- Scope confirmation — integration scenarios and API needs (login, balances, statements, InstaPay/PESONet transfers, card controls).
- Protocol analysis & API design — 2 to 5 business days depending on complexity; sandbox access set up on the UnionBank developer portal where relevant.
- Build & internal validation — 3 to 8 business days, against sandbox fixtures.
- Docs, samples and test cases — 1 to 2 business days.
- Handover — typical first delivery 5 to 15 business days; production certification or corporate onboarding may extend timelines.
FAQ
What do you need from me to start a UnionBank Online integration?
How long does delivery take?
How do you handle compliance and data privacy?
Do you deliver source code or a hosted API?
📱 Original app overview (appendix)
UnionBank Online is the mobile banking app of UnionBank of the Philippines (package com.unionbankph.online; web version at online.unionbankph.com). It positions itself as "your bank in the palm of your hand": you can open an account entirely in-app without visiting a branch, then manage accounts and cards, transfer funds, pay bills, deposit checks, and more.
- Open an account — first Philippine bank to enable in-app account opening; choose Personal Savings, PlayEveryday, Savings+, Lazada or GetGo; Visa debit card delivered to your home/office; instant Lazada Virtual Debit card for online shopping.
- Deposit checks 24x7 — UnionBank checks clear after two hours including weekends and holidays; other banks' checks follow industry cut-off and clearing hours.
- Manage accounts — all deposit and credit-card balances in one place; real-time monitoring of savings/checking/debit/ATM activity; credit-card spend, points and statements; lock/unlock, set limits and transaction controls on Visa credit cards; track loan repayments; OTP and biometric login; self-service password reset and profile unblocking; PlayEveryday rank, points and leaderboards; Goals savings for emergency funds and other targets.
- Transfer funds & pay bills — transfer to anyone, any bank, anytime, no enrolment; real-time crediting between own/UnionBank accounts; free PESONet transfers (same/next business day); InstaPay up to PHP 50,000 with real-time crediting for PHP 10; USD to other local banks for USD 1 via PDDTS; pay utilities, phone, rent, school and more with no biller enrolment; save frequent transferees and billers; schedule recurring transfers and bills; send to Palawan Express, Cebuana Lhuillier, LBC and PeraHub remittance centers.
- Request payments / split bills — send payment requests to another UnionBank Online user by mobile number; split bills with friends; generate a personal QR code for friends to scan and pay.
- Schedule branch visit — book a branch visit in the app, transact without forms or signatures, and use the built-in branch/ATM locator.
- Other features — activate new credit cards; redeem credit-card points; browse promos and discounts in the Voucher Wallet; do USD/PHP conversion and view real-time FX rates; Mobile Tap to Pay (NFC) added in 2025.
- Recognition — 2018 Best Retail Mobile Banking Experience (The Asset), 2018 Online Banking Initiative of the Year (Asian Banking and Finance), 2018 Best Technology Implementation – Front End, Highly Commended (Retail Banker International).
- Regulatory — UnionBank of the Philippines is regulated by the Bangko Sentral ng Pilipinas; member of PDIC with maximum deposit insurance of PHP 500,000 per depositor; customer service at customer.service@unionbankph.com or (+632) 841-8600.
This appendix summarises the app's public description for reference; UnionBank Online and UnionBank of the Philippines are trademarks of their owner. This page describes independent, authorized integration positioning and is not affiliated with or endorsed by UnionBank.