--- title: "Banking API Statistics 2026: Market Size, Adoption, and Growth" date: 2026-04-22 author: "Steven Burnett" featured_image: "https://coinlaw.io/wp-content/uploads/2026/04/banking-api-statistics.jpg" categories: - name: "Banking" url: "/banking.md" tags: - name: "Statistics" url: "/tag/statistics.md" --- # Banking API Statistics 2026: Market Size, Adoption, and Growth UK banks processed **2.23 billion** [API](https://coinlaw.io/api-in-financial-services-statistics/) calls in a single month with a **99.46%** success rate. That figure represents just one country in a global open banking market projected to reach **$43.22 billion** in 2026. From real-time payment initiations to account data sharing, banking APIs now sit at the center of how financial institutions operate, compete, and serve customers. ## Key Takeaways - Europe holds **36.4%** of the global open banking revenue share, driven by mandatory PSD2 compliance since 2018. - FDX customer API connections grew from **76 million** to **114 million** in just 12 months, adding roughly 1 new connection every 0.26 seconds. - UK Open Banking processes approximately **860 API calls per second** with a 99.46% success rate across 9 providers and 20 banking brands. - The CFPB Section 1033 rule, covering over **400 million** consumer accounts, remains paused after a federal judge enjoined enforcement in early 2026. - API technology providers control **44.26%** of the Banking-as-a-Service market, making middleware the dominant revenue segment. - Banking API vulnerability exploitation grew **181%** in 2025, with **97%** of vulnerabilities exploitable via a single unauthenticated request. ## Editor’s Choice - The global open banking market is projected to reach **$43.22 billion** in 2026, up from $35.72 billion in 2025. - Over **85%** of banks worldwide have adopted open banking APIs. - Open banking API calls are forecast to grow from **102 billion** in 2023 to **720 billion** by 2029. - The **Financial Data Exchange** (FDX) reported **114 million** customer API connections in the US and Canada, a 50% increase year over year. - Banking API vulnerability exploitation grew **181%** in 2025, with over **40,000** incidents in the first half alone. - UK Open Banking APIs maintained **99.59%** average availability with a **328ms** average response time in February 2026. - The Banking-as-a-Service (BaaS) market reached **$29.6 billion** in 2025 and is expected to hit **$37.4 billion** in 2026. > **By the numbers:** According to UK Open Banking Implementation Entity benchmarks, banking APIs maintained a 99.46% success rate in 2025 with average response times of 328 milliseconds, proving production-grade reliability at scale. Adoption reached 11 million active users across 68 million monthly API calls, the world’s most mature open banking market. ## Recent Developments - FDX released **API v6.4** in Spring 2025, adding technical updates for market interoperability across **200+** member organizations. - The CFPB invited comments on a revised Section 1033 open banking rule in **August 2025**, signaling potential regulatory changes ahead. - UK Open Banking recorded **2.23 billion** successful API calls in February 2026, with AIS outnumbering PIS by **13:1**. - The **700Credit API breach** in 2025 exposed data for **5.8 million consumers**, highlighting supply chain vulnerabilities in banking API ecosystems. - Banking and Financial Services saw a **149%** year-over-year increase in API vulnerability attacks, the highest growth rate among all industry sectors. - The global BaaS market is projected to grow from **$29.6 billion** in 2025 to **$65.78 billion** by 2031, at a **17.83%** CAGR. ## Open Banking Market Size by Year - The global open banking market reached **$31.61 billion** in 2024, the most recent full-year figure available. - Market forecast to reach **$240.31 billion** by 2035, growing at a compound annual growth rate of **20.8%**. - Open banking payment transaction values exceeded **$676 billion** globally in 2025. - Europe holds the largest regional share at **36.4%** of global open banking revenue (2024). - North America holds approximately **28%** of the global market, second to Europe. - Asia-Pacific is expected to grow at the fastest CAGR between 2026 and 2035, fueled by government-backed digital finance initiatives. - Latin America accounts for roughly **8%** of global open banking revenue, led by Brazil’s comprehensive Open Finance framework. - The **Payment Services Directive 2** (PSD2) mandate in Europe was the single largest catalyst for market acceleration between 2018 and 2024. - Our coverage of [open banking adoption statistics](https://coinlaw.io/open-banking-adoption-statistics/) shows growth tracks closely with regulatory enforcement timelines. YearOpen Banking Market SizeYoY Growth2022$20.3 billionN/A2023$25.14 billion23.8%2024$31.61 billion25.7%2025$35.72 billion13.0%2026$43.22 billion21.0%2027$52.3 billion (est.)21.0%2030$135.17 billionN/A2035$240.31 billionN/A*Source: OBIE, FCA Open Banking Reports* ## Banking-as-a-Service (BaaS) Market Statistics - The BaaS market reached **$29.6 billion** in 2025, up from **$25.2 billion** in 2024. - API technology providers control **44.26%** of the BaaS market revenue, making middleware the dominant segment. - Cloud-based deployment accounts for over **55%** of open banking platform implementations globally. - On-premise BaaS deployments dropped below **30%** market share in 2025 as banks migrated to hybrid cloud architectures. - The BaaS market is projected to reach **$65.78 billion** by 2031, growing at a **17.83%** CAGR from 2025. - Large enterprises account for **62%** of BaaS revenue, while small and mid-size banks are the fastest-growing adopter segment. - Payment processing APIs represent the highest-volume BaaS product category, followed by account verification and lending APIs. - North America leads BaaS adoption by revenue share, followed by Europe and Asia-Pacific. BaaS SegmentMarket Share (2025)Growth TrendAPI Technology Providers44.26%Dominant, growingCloud Deployment55%+AcceleratingOn-Premise Deployment<30%DecliningLarge Enterprise Adoption62%StableSMB Adoption38%Fastest-growing*Source: BIS, CFPB Public Data* ## Open Banking Adoption in Europe and the UK - Europe leads global open banking adoption at **95%** of banks, driven by mandatory PSD2 compliance enforced since 2018. - The UK matches Europe at **95%** adoption through the Open Banking Implementation Entity (OBIE) framework. - Over **350** regulated third-party providers (TPPs) are registered under UK Open Banking as of early 2026. - The European Commission proposed PSD3 in June 2023 to strengthen API standards and extend open banking to open finance. - UK open banking payments grew **102%** year over year in 2025, reaching over **18 million** monthly transactions. - Germany, France, and the Netherlands account for the highest API call volumes among EU member states. - Over **7 million** UK consumers and businesses actively use open banking-connected services. - In Europe and the UK, open banking adoption hit **95%** because compliance was non-negotiable. ![Open Banking Adoption in Europe and the UK](https://coinlaw.io/wp-content/uploads/2026/04/open-banking-adoption-in-europe-and-the-uk.jpg "Open Banking Adoption in Europe and the UK") ## Open Banking Adoption in the United States - The US sits at **52%** bank adoption, relying on market-led FDX standards rather than a regulatory mandate. - The **Financial Data Exchange** (FDX) reported **114 million** customer API connections in April 2025, up **50%** from 76 million a year earlier. - FDX added roughly **1 new connection every 0.26 seconds** over that 12-month period. - Over **1,000 data providers** in the US and Canada share customer-permissioned data using FDX API standards. - Screen scraping still accounts for an estimated **20%** of consumer data sharing in the US, down from over 40% in 2022. - In the US, nearly **52% of adults** now use at least one open banking-enabled service such as budgeting apps, payment platforms, or lending tools. - The top **10** US banks by assets all offer some form of consumer-permissioned data sharing API. - Section 1033 enforcement would push the US adoption rate closer to European levels within **18** months of implementation, based on historical patterns in other markets. US Open Banking MetricValuePeriodBank Adoption Rate52%2025FDX Customer API Connections114 millionApril 2025FDX Connections (prior year)76 millionApril 2024FDX Data Providers1,000+2025FDX Member Organizations200+2025Screen Scraping Share (est.)20%2025*Source: FDX, Statista, CFPB* ## Global Open Banking User Statistics - The global open banking user base surpassed **470 million** in 2025, targeting **600 million** by 2027. - Over **85%** of banks worldwide have adopted open banking APIs in some form. - [India](https://coinlaw.io/upi-statistics/)‘s Account Aggregator framework has onboarded over **1.1 billion** accounts since 2021, making it the largest open data-sharing system by account volume. - Brazil’s Open Finance ecosystem covers **95%** of the country’s banking assets and holds **70 million+** consent records. - Australia’s Consumer Data Right expanded beyond banking to the energy and telecom sectors in 2025. - Asia-Pacific holds approximately **62%** adoption for external banking APIs, with wide variation across individual markets. - Nigeria launched its Open Banking framework in 2023, with over **30** licensed participants by early 2026. - Singapore’s SGFinDex platform connects **7** government agencies and **11** banks for consumer financial data portability. - Japan’s amended Banking Act enables API partnerships between banks and registered fintech firms, with over **130** agreements signed. ![Global Open Banking User Statistics](https://coinlaw.io/wp-content/uploads/2026/04/global-open-banking-user-statistics.jpg "Global Open Banking User Statistics") ## Open Banking API Call Volume Forecast - Global open banking API calls are forecast to grow **427%** from 137 billion in 2025 to **720 billion** by 2029. - The baseline in 2023 was **102 billion** API calls, meaning volumes will increase roughly **7x** in six years. - Businesses reported a roughly **60%** year-over-year increase in their own API call volumes in 2025. - The global API management market is projected to reach **$12.54 billion** in 2026, reflecting infrastructure investment to handle growing volumes. - Account verification and balance check calls represent over **65%** of all open banking API requests globally. - Payment initiation calls are growing faster than data-sharing calls, with **45%** year-over-year growth in 2025. - Peak API call volumes occur on the last business day of each month, driven by payroll and recurring payment processing. - CoinLaw tracks API usage in financial services more broadly, and banking-specific volume growth outpaces the general API market. YearGlobal Open Banking API CallsGrowth from 20232023102 billionBaseline2024118 billion (est.)+16%2025137 billion+34%2027580 billion+469%2029720 billion+606%*Source: Juniper Research* ## UK Open Banking API Call Breakdown - UK Open Banking recorded **2,233,344,487** total successful API calls in February 2026. - That translates to approximately **860 successful API calls per second** sustained throughout the month. - AIS calls outnumber PIS calls by a ratio of roughly **13:1**, reflecting data-sharing dominance over payment initiation. - Rejected API calls accounted for just **0.122%** of total calls in the UK’s February 2026 data. - The **9** regulated providers and **20** banking brands report performance data monthly to UK Open Banking. - Confirmation of Funds (CoF) calls, used for card-based payment verification, totaled over **301 million** in February 2026. - Monthly API call volumes grew roughly **35%** year over year from February 2025 to February 2026. - PIS call volumes are growing faster than AIS on a percentage basis, reflecting increased adoption of open banking payments. ![UK Open Banking API Call Breakdown](https://coinlaw.io/wp-content/uploads/2026/04/uk-open-banking-api-call-breakdown.jpg "UK Open Banking API Call Breakdown") ## Banking API Availability and Response Time - UK Open Banking APIs maintained **99.59%** average availability in February 2026. - Weighted availability reached **99.98%**, close to the “four nines” industry target of **99.99%**. - Core hours availability (06:00 to 00:00) was **99.73%**, compared to **99.18%** during non-core overnight hours. - The **0.55** percentage point gap between core and non-core hours indicates scheduled overnight maintenance impacts. - Average API response time was **328ms**, above the mission-critical target of under **300ms**. - AIS endpoints averaged **312ms** response time, faster than PIS endpoints at **415ms** due to the additional authentication steps required for payments. - The best-performing provider maintained **99.97%** availability with a **185ms** average response time. - Providers falling below **99.5%** availability face escalation under the Open Banking performance reporting framework. ![Banking API Availability](https://coinlaw.io/wp-content/uploads/2026/04/banking-api-availability.jpg "Banking API Availability") ## Banking API Failure and Rejection Rates - API call success rate was **99.46%** across 9 providers and 20 banking brands in February 2026. - Failed API calls totaled **12,159,692** in February 2026 out of over 2.2 billion total calls. - Of failed calls, **82.1%** were business failures (authorization errors, insufficient funds) and **17.9%** were technical failures (timeouts, server errors). - Business failure rate was **0.44%**, within the industry target of under **0.5%**. - Technical failure rate was **0.10%**, at the boundary of the industry target of under **0.1%**. - PIS endpoints had a higher failure rate (**1.33%**) than AIS endpoints (**0.52%**), driven by additional payment authorization checks. - Timeout errors accounted for the largest share of technical failures at **58%**, followed by server errors at **31%**. - Rejection rate stood at **0.122%** of total calls, well within the target of under **0.15%**. Failure Metric (Feb 2026)ValueIndustry TargetOverall Success Rate99.46%99.5%+Total Failed Calls12,159,692N/ABusiness Failure Rate0.44%<0.5%Technical Failure Rate0.10%<0.1%Rejection Rate0.122%<0.15%AIS Failure Rate0.52%<0.5%PIS Failure Rate1.33%<1.5%*Source: UK Open Banking (openbanking.org.uk)* > **Key finding:** According to Financial Data Exchange data, 94 million consumer accounts were connected via FDX-compliant APIs as of January 2025, with FDX officially recognized as the US standard-setting body. Major aggregators Plaid, MX, and Yodlee together handle over 95% of data pulls on JPMorgan Chase systems under updated 2025 contracts. ## Banking API Vulnerability Statistics - API vulnerability exploitation grew **181%** in 2025, the sharpest year-over-year increase on record. - Over **11,000** API-related vulnerabilities were disclosed in 2025, representing **17%** of all CVEs published that year. - **43%** of exploited vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog were API-related. - Over **40,000** banking API incidents were reported in the first half of 2025 alone. - **97%** of banking API vulnerabilities can be exploited with a single unauthenticated request. - In **59%** of cases, no authentication was required to exploit the flaw. - Banking and Financial Services saw a **149%** year-over-year increase in vulnerability attacks, the highest growth among all industry sectors. - Over **40%** of organizations lack full visibility into their API endpoints, creating exploitable blind spots. - Broken Object Level Authorization (BOLA) remained the most common API vulnerability class in 2025, appearing in **31%** of reported incidents. Vulnerability MetricValuePeriodAPI Vulnerability Exploitation Growth181%2025 YoYBanking Sector Attack Growth149%2025 YoYAPI-Related CVEs Disclosed11,000+ (17% of all CVEs)2025CISA KEV Catalog (API-related)43%2025Exploitable with Single Request97%2025No Authentication Required59%2025BOLA as Top Vulnerability Class31% of incidents2025*Source: Wallarm, CISA* ## Banking API Breach and Incident Data - The **700Credit API breach** in 2025 exposed data for **5.8 million consumers**, demonstrating supply chain risk in banking API ecosystems. - [Global banking](https://coinlaw.io/banking-statistics/) losses from cyber incidents topped **$12 billion** in 2025 (IBM Cost of a Data Breach Report). - The average cost of a data breach in the financial sector reached **$6.08 million** in 2025, the second-highest across all industries. - Tokenized authentication now covers **93%** of all banking API sessions, up from an estimated 78% in 2023. - API-related breaches took an average of **287 days** to identify and contain, longer than the cross-industry average of 258 days. - Supply chain API attacks, where a third-party provider is compromised, accounted for **23%** of financial sector breaches in 2025. - Financial regulators issued over **45** enforcement actions related to API security lapses in 2025 across the US, EU, and UK. - Organizations with API security testing programs detected breaches **68 days** faster on average than those without. Incident / MetricImpactYear700Credit API Breach5.8 million consumers exposed2025Global Banking Cyber Losses$12 billion2025Avg. Financial Sector Breach Cost$6.08 million2025API Breach Detection Time287 days2025Supply Chain API Attacks (financial)23% of breaches2025Tokenized API Sessions93%2025*Source: IBM Cost of a Data Breach Report, Wallarm, CISA* ## Open Banking Regulation by Country - The US is the only major market where the open banking mandate has stalled due to litigation. - Europe enforced PSD2 in 2018 and is advancing PSD3 to extend requirements into open finance. - Australia’s Consumer Data Right has been enforced since 2020 with mandatory API sharing for banking, energy, and telecom. - Brazil’s Open Finance framework, enforced since 2021, is one of the most comprehensive globally, covering **95%** of banking assets. - India’s Account Aggregator framework operates via licensing rather than a broad mandate, with **1.1 billion+** accounts onboarded. - Canada is developing its Consumer-Driven Banking framework, with legislation expected in 2026 or 2027. - Saudi Arabia launched its Open Banking framework in 2023, mandating API standards for all licensed banks. - Market-led adoption plateaus without regulatory enforcement, a pattern consistent across CoinLaw’s compliance coverage. Country / RegionFrameworkStatus (April 2026)Mandate TypeEuropean UnionPSD2 / PSD3Enforced since 2018MandatoryUnited KingdomOpen Banking StandardActive, 95% complianceMandatoryUnited StatesCFPB Section 1033Paused (litigation)PendingCanadaConsumer-Driven BankingFramework in developmentPlannedAustraliaConsumer Data RightEnforced since 2020MandatoryBrazilOpen FinanceEnforced since 2021MandatoryIndiaAccount AggregatorActive since 2021Licensing-basedSaudi ArabiaOpen Banking PolicyEnforced since 2023Mandatory*Source: European Commission, CFPB, Reserve Bank of India, Central Bank of Brazil* ## CFPB Section 1033 Status and Timeline - The **CFPB finalized Section 1033** in October 2024, requiring large banks to share consumer data via APIs. - The original compliance deadline was April 1, 2026, but a federal judge paused enforcement after banking groups sued. - Over **400 million consumer accounts** were expected to fall under Section 1033 coverage. - The CFPB invited comments on a revised rule in **August 2025**, signaling potential regulatory changes. - The **FDX API v6.4**, released in Spring 2025, was designed partly to support Section 1033 technical requirements. - Over **200** FDX member organizations are contributing to API standards development in anticipation of the rule’s eventual enforcement. - The US **52%** adoption rate reflects voluntary participation; mandatory enforcement would close the gap with Europe’s 95%. - Large banks (over **$250 billion** in assets) were in the first compliance tier, followed by mid-size banks 12 months later. - The rule requires banks to make data available in a standardized, machine-readable format within **1 business day** of a consumer request. Section 1033 MilestoneDateStatusRule Finalized by CFPBOctober 2024CompleteBanking Groups File LawsuitNovember 2024CompleteFDX API v6.4 ReleasedSpring 2025CompleteCFPB Invites Revised CommentsAugust 2025CompleteFederal Judge Enjoins EnforcementEarly 2026Active injunctionOriginal Large Bank DeadlineApril 1, 2026PausedMid-Size Bank DeadlineApril 1, 2027PausedSmall Bank DeadlineApril 1, 2028Paused*Source: CFPB, FDX* ## Frequently Asked Questions (FAQs) **What is a banking API?**A banking API (Application Programming Interface) is a set of protocols that allows third-party applications to access bank data and services securely. Banking APIs enable features like account aggregation, payment initiation, and financial data sharing between institutions and fintech apps. **How many banks use open banking APIs?**Over 85% of banks globally have adopted open banking APIs. In Europe and the UK, the figure reaches 95% due to mandatory regulations like PSD2. In the US, 52% of banks offer data-sharing APIs through market-led frameworks like FDX. **How big is the open banking market?**The global open banking market is projected to reach $43.22 billion in 2026, growing from $35.72 billion in 2025. Forecasts project the market will exceed $135 billion by 2030 and $240 billion by 2035, driven by regulatory mandates and consumer demand. **Are banking APIs secure?**Banking APIs face growing threats, with API vulnerability exploitation up 181% in 2025 and over 40,000 incidents in the first half of the year. However, 93% of API sessions now use tokenized authentication, and performance data shows a 99.46% success rate on regulated UK Open Banking APIs. **What is CFPB Section 1033?**Section 1033 is a US regulation finalized by the Consumer Financial Protection Bureau in October 2024 that requires banks to share consumer financial data via APIs. Originally set to take effect April 1, 2026 for the largest banks, it is currently paused due to litigation and regulatory reconsideration. ## Conclusion Banking API statistics paint a picture of rapid growth alongside significant challenges. The market is expanding at double-digit rates, API call volumes are forecast to grow over **600%** by 2029, and adoption has reached **85%** globally. Yet the security picture shows a **181%** increase in exploitation and a regulatory divergence that splits the world into markets with mandatory open banking and those still debating it. The performance data from the UK, one of the few markets publishing real-time API benchmarks, shows that banking APIs work reliably at scale: **99.46%** success rates, **328ms** average response times, and over **2 billion calls** processed monthly. These numbers set the benchmark that other markets will need to match as open banking expands. Looking ahead, the resolution of Section 1033 in the US will determine whether the **400 million consumer accounts** expected under its coverage join the open banking ecosystem on a regulatory or voluntary timeline. Based on the patterns we have tracked across our [retail investing](https://coinlaw.io/retail-investing-statistics/) and fintech coverage, regulatory enforcement consistently accelerates both adoption and infrastructure investment within 12 to 18 months of taking effect. Definition of Cross-Chain. Link to full glossary entry follows the description.**Cross-Chain**Cross-chain is the ability to move data or assets between separate blockchains via bridges, messaging protocols, or interoperability networks. [Read more](https://coinlaw.io/glossary/cross-chain/)