One App, One Door: What to Do When Your Bank Won't Open
Written with AI assistance and reviewed by the NorwegianSpark SA editorial team
The pitch for app-first banking is that everything lives in one place. That is also, precisely, the problem. A traditional bank gave you a branch, a phone line, a card, a cheque book and a website, and any one of them could carry you through the failure of another. An app-only account gives you one door, and the key to it is a device you can drop in a canal.
This is the least glamorous question to ask after choosing a platform from our AI banking app comparison, and it is the one you will be most grateful to have answered in advance. Not because app banks are unreliable — most are extremely reliable — but because the consequence of the rare failure is total rather than partial.
Seven ways the door closes
Ranked roughly by how often people actually hit them, not by how dramatic they sound:
- You lose the phone, or it dies. The single most common cause, and the most fixable in advance.
- You change device. Re-registration frequently needs a code sent to the old handset, an app-based authenticator that lives on it, or a re-verification you cannot complete while travelling.
- The app or the platform has an outage. Usually short. Occasionally on a payday.
- A SIM swap or number loss. If your recovery route is an SMS code, your account security is really your mobile operator's security.
- An operating system or app-store problem. A forced update on an unsupported handset can lock you out of the app while the account itself is perfectly healthy.
- A geography or travel block. A first login from a new country, a VPN, or a card used somewhere your pattern says you are not.
- An account review. The account is fine, the app opens, and the money will not move. This one is different in kind and covered in when the algorithm says no.
Which of these your provider can fix, and which it cannot
| What happened | Who can actually resolve it | Realistic route while it is happening |
|---|---|---|
| Phone lost or broken | You, if you prepared | Web banking if it exists, or a second provider |
| New device, no old-device code | The provider, via support | Identity re-verification, which takes as long as it takes |
| Platform outage | The provider only | Wait, and use a card or account elsewhere |
| SIM swap | Your mobile operator, then the bank | Report to both immediately, in that order |
| Travel or geography block | Usually clears itself | A second card on a different scheme |
| Account under review | The provider, on its own timetable | Documents, in writing, once and complete |
The pattern is hard to miss. In five of six rows, the thing that rescues you is something you set up before the failure, somewhere other than the failing provider.
What the rules actually promise you
There is a genuine regulatory regime here, and it is worth knowing what it is and what it is not.
In the European Union, the Digital Operational Resilience Act — Regulation (EU) 2022/2554, which entered into application on 17 January 2025 — sets requirements for financial entities on managing information and communication technology risk, incident reporting, resilience testing and the oversight of critical third-party technology providers. Other major jurisdictions have introduced operational-resilience regimes of their own, with different names and timetables.
DORA regulation number and application date checked at the EIOPA official page on 5 September 2026.
Here is the part that matters to you personally: these regimes oblige firms to manage and report technology risk to their regulators. They are not a promise that your app will work on Friday, and they are not a compensation scheme for the afternoon you could not pay for lunch. Rules of this kind make systemic failure rarer and better handled. They do not make your individual Tuesday whole.
Nor, separately, is any of this about whether your money is safe if the firm fails — a genuinely different question, with a genuinely different answer depending on whether you hold a deposit or an e-money balance. That one is who actually holds your money, and it is worth reading alongside this.
The backup setup, in order of value
- A second account at a genuinely different institution. Not a second product from the same provider, and ideally not one riding on the same underlying partner bank. Keep enough in it to cover roughly a month of essentials — you decide the number from your own outgoings, not from a rule of thumb.
- A card on a different scheme. If your main card is on one network, having your backup on the other protects you against an outage at the scheme level rather than at your bank.
- Recovery that does not live on the phone. Print or write down the recovery codes. An authenticator app that exists only on the handset you have just lost is not a recovery route.
- Some physical cash. Unfashionable, still undefeated. The amount that would get you home and fed for a couple of days.
- Statements exported, off the app. Download a year of history periodically. If access goes, so does the evidence you need for the dispute, the landlord, the tax return or the visa application.
- A written list of your standing payments. Which direct debits and standing orders leave which account, and when. Reconstructing this from memory under pressure is miserable.
- The provider's non-app contact routes, saved offline. The web login URL, the support email, the phone number, and — if you are outside the country — the international number, which is often different.
What this actually costs
Work it out rather than guessing, because in most cases the answer is close to nothing and people assume otherwise.
Add up: the monthly fee of the second account, if any; any card fee; and the interest you forgo by holding the buffer somewhere accessible rather than somewhere higher-yielding. Suppose the second account is free, the card is free, and the buffer is 1,000 in your currency held at a rate one percentage point below your best alternative — figures you replace with your own, since we are not quoting anyone's rates here. The cost of the whole arrangement is then 10 a year, which is the price of not being locked out of your own money.
If the second account does carry a fee, compare that fee against one instance of the failure it insures against: a missed rent payment, a late-payment charge, a cancelled trip. The arithmetic is not usually close.
The honest limits of this plan
A backup account is not a universal remedy, and it would be dishonest to sell it as one.
- It does not help against a correlated freeze. If both providers are reacting to the same incoming payment or the same counterparty, both may act. Redundancy protects against independent failures, not shared causes.
- It does not help if both accounts sit on the same underlying institution. Several app brands are front ends over the same partner bank. Check before you assume you have diversified.
- It does not survive identity problems. If your identity documents have expired or your address is unverifiable, that follows you to every provider. The fix is upstream, and it is covered in how to open a global bank account.
- It adds a surface. Two accounts means two sets of credentials, two apps and two more places for a scam to reach you. Read global bank scams to avoid before you widen your footprint.
The counter-argument
Most people will go their entire lives without being locked out of a banking app for longer than an afternoon, and app-only banks are, on the whole, more reliable than the branch networks they replaced. Building a redundancy plan for an event that may never arrive is exactly the sort of over-engineering that consumes a Saturday and delivers nothing.
That is a fair criticism of an elaborate version of this. It is not a fair criticism of the simple version, which is: open one free second account somewhere else, keep a month of essentials in it, and write down your recovery codes. That is an afternoon, once, and it converts a category of total failure into a category of inconvenience. The people who wish they had done it are never the ones who did.
FAQ
Does a second account hurt my chances of being approved elsewhere? Holding more than one everyday account is entirely ordinary and is not itself a negative signal. Opening a great many accounts in a short period is a different pattern, and it does get noticed.
Should the backup be a traditional bank or another app? Whichever genuinely fails independently of the first. A different institution on a different technology stack matters far more than the label on the front. If you want a structured way to check the second one, how to check if a bank is safe walks through it.
What if I am abroad when I get locked out? This is the scenario worth preparing for specifically, because re-verification often requires documents and a stable address. Carry the backup card physically and separately from the primary, and see best bank accounts for expats for account structures that travel better.
Is web access a real backup? Only if your provider genuinely has it, and only if logging in does not require the app to approve the login. A great many app-first providers fail that second test. Check yours now rather than at the moment it matters.
Sources
- Digital Operational Resilience Act (DORA), Regulation (EU) 2022/2554 — EIOPA overview page, application date 17 January 2025: eiopa.europa.eu (checked 5 September 2026)
Disclaimer: BestAiGlobalBank is an independent comparison site published by NorwegianSpark SA. General information, not financial advice. Provider terms, availability and protections differ by country — verify with your own provider before relying on any arrangement described here.
