What is the Banking Information Reference Portal?
If you are issuing Dutch IBANs, sooner or later you will hear the words “Verwijzingsportaal Bankgegevens”. (For the wider IBAN-issuance picture, start with our walkthrough on how to launch Dutch IBANs.) It is the single most operationally important integration a Netherlands-licensed PSP has to deal with after its banking-system stack — and the one most often discovered late. This is what it is, who is on the other side of it, and what an issuer actually has to do.
1. What the portal is
The Verwijzingsportaal Bankgegevens (VB) — “Banking Information Reference Portal” in English — is a Dutch government-run query system. Authorised public agencies submit account-holder identification queries; financial institutions reply with the matching customer record from their books. It replaced an email-and-PDF process that did not scale and that did not meet modern audit standards.
The portal is operated by Justid (Justitiële Informatiedienst), an executive agency of the Dutch Ministry of Justice and Security, on behalf of the Directoraat-Generaal Ondermijning (DGO) — the directorate co-ordinating the response to organised crime. The legal architecture sits on top of the Wet verwijzingsportaal bankgegevens (the VB Act, supervised by DNB) and an implementing decree.
2. Who is on the asking side
Eight categories of public-sector users are authorised to query the VB:
- The Tax and Customs Administration (Belastingdienst)
- The Public Prosecution Service (Openbaar Ministerie)
- The Police
- The Financial Intelligence Unit Nederland (FIU)
- The Rijksrecherche (the Dutch police-investigations branch)
- The FIOD (Fiscale Inlichtingen- en Opsporingsdienst — fiscal intelligence and investigation)
- The ILT-IOD and NVWA-IOD (transport-inspectorate and food-safety investigation services)
- The Royal Marechaussee (Koninklijke Marechaussee) and the Labour Inspectorate
None of these can browse customer data freely. Each query is logged, attributed to a named investigator, and tied to a specific legal basis — typically an active criminal investigation, a tax-recovery procedure, or an AML/CTF lead.
3. Who is on the answering side
Every PSP that issues a Dutch IBAN — banks under CRR, EMIs, PIs — and every safe-deposit-box provider must connect to the VB and respond to queries within the timelines set by the operator. Connection is not optional and not phased: it is a precondition for offering IBAN-NL products in production.
4. What data flows through it (today and next)
Today, the portal returns identifying data only: the account holder’s name, the names of authorised representatives, the relationship type, and the same fields for safe-deposit-box holders. The portal explicitly excludes balances and transaction data — for now.
The platform is being expanded in stages. The next phases bring balance information and transaction data into scope, mirroring the broader EU push under the EU AML package and the centralised bank-account registers (CBAR / BARIS) that each member state must operate. PSPs joining today should architect for the wider data set, not just the current one — retro-fitting after the fact is more expensive than designing it in.
Records returned must be no older than 48 hours. Stale records do not satisfy the obligation.
5. How a PSP connects
There are two integration modes, chosen at the time of intake:
- Web-portal route — for very low query volumes. Officers from authorised agencies submit a request through the portal UI, the FI receives a notification, and a human at the FI replies.
- System-to-system route — the only realistic option at any meaningful scale. The FI exposes a machine endpoint, queries arrive over the standardised XML/REST channel, and replies are returned automatically against the FI’s customer master.
Most modern PSPs go straight to the system-to-system route. It is what the supervisor expects to see; it is also what enables the 48-hour freshness rule to be met without a manual desk in the loop.
6. Timelines, and the partner shortcut
The official Justid/OPS guidance is an average of six months from intake to live connection, and Justid is explicit that capacity is limited — they process a fixed number of new connections per year. This is what makes the Reference Portal the single biggest source of slip in any Dutch IBAN-issuance project.
7. Costs and governance
Today the connection and run-cost is borne by the DGO — Justid does not invoice FIs or government users directly. That is a policy choice and may change; budget defensively. Governance flows through user-group meetings between the FI community and DGO, where roadmap items (balance data, transaction data, performance SLAs) are discussed.
8. What to do, today
If you are scoping a Dutch IBAN-issuance project:
- Treat the Reference-Portal connection as a day-one parallel track, not as something that follows DNB grant.
- Pick the system-to-system integration — the web-portal route is rarely a sustainable answer for any production-scale issuer.
- Architect for balance and transaction data on day one even if the portal does not require them yet.
- Decide whether you queue for a Justid build slot (~6 months) or partner-bridge (~15 days). The decision shapes the rest of the launch plan.
Related: How to launch Dutch IBANs
