Banking API Statistics 2026: Market Size, Adoption, and Growth

UK banks processed 2.23 billion API calls in a single month with a 99.46% success rate. That figure represents just one country in a global open banking market projected to reach $43.22 billion in 2026. From real-time payment initiations to account data sharing, banking APIs now sit at the center of how financial institutions operate, compete, and serve customers.

Key Takeaways

• Europe holds 36.4% of the global open banking revenue share, driven by mandatory PSD2 compliance since 2018.
• FDX customer API connections grew from 76 million to 114 million in just 12 months, adding roughly 1 new connection every 0.26 seconds.
• UK Open Banking processes approximately 860 API calls per second with a 99.46% success rate across 9 providers and 20 banking brands.
• The CFPB Section 1033 rule, covering over 400 million consumer accounts, remains paused after a federal judge enjoined enforcement in early 2026.
• API technology providers control 44.26% of the Banking-as-a-Service market, making middleware the dominant revenue segment.
• Banking API vulnerability exploitation grew 181% in 2025, with 97% of vulnerabilities exploitable via a single unauthenticated request.

Editor’s Choice

• The global open banking market is projected to reach $43.22 billion in 2026, up from $35.72 billion in 2025.
• Over 85% of banks worldwide have adopted open banking APIs.
• Open banking API calls are forecast to grow from 102 billion in 2023 to 720 billion by 2029.
• The Financial Data Exchange (FDX) reported 114 million customer API connections in the US and Canada, a 50% increase year over year.
• Banking API vulnerability exploitation grew 181% in 2025, with over 40,000 incidents in the first half alone.
• UK Open Banking APIs maintained 99.59% average availability with a 328ms average response time in February 2026.
• The Banking-as-a-Service (BaaS) market reached $29.6 billion in 2025 and is expected to hit $37.4 billion in 2026.

By the numbers: According to UK Open Banking Implementation Entity benchmarks, banking APIs maintained a 99.46% success rate in 2025 with average response times of 328 milliseconds, proving production-grade reliability at scale. Adoption reached 11 million active users across 68 million monthly API calls, the world’s most mature open banking market.

Recent Developments

• FDX released API v6.4 in Spring 2025, adding technical updates for market interoperability across 200+ member organizations.
• The CFPB invited comments on a revised Section 1033 open banking rule in August 2025, signaling potential regulatory changes ahead.
• UK Open Banking recorded 2.23 billion successful API calls in February 2026, with AIS outnumbering PIS by 13:1.
• The 700Credit API breach in 2025 exposed data for 5.8 million consumers, highlighting supply chain vulnerabilities in banking API ecosystems.
• Banking and Financial Services saw a 149% year-over-year increase in API vulnerability attacks, the highest growth rate among all industry sectors.
• The global BaaS market is projected to grow from $29.6 billion in 2025 to $65.78 billion by 2031, at a 17.83% CAGR.

Open Banking Market Size by Year

• The global open banking market reached $31.61 billion in 2024, the most recent full-year figure available.
• Market forecast to reach $240.31 billion by 2035, growing at a compound annual growth rate of 20.8%.
• Open banking payment transaction values exceeded $676 billion globally in 2025.
• Europe holds the largest regional share at 36.4% of global open banking revenue (2024).
• North America holds approximately 28% of the global market, second to Europe.
• Asia-Pacific is expected to grow at the fastest CAGR between 2026 and 2035, fueled by government-backed digital finance initiatives.
• Latin America accounts for roughly 8% of global open banking revenue, led by Brazil’s comprehensive Open Finance framework.
• The Payment Services Directive 2 (PSD2) mandate in Europe was the single largest catalyst for market acceleration between 2018 and 2024.
• Our coverage of open banking adoption statistics shows growth tracks closely with regulatory enforcement timelines.

Source: OBIE, FCA Open Banking Reports

Don't chase the news. Let us curate it.

You get one weekly briefing with only the stories that matter. If the market is quiet, we skip it.

Email address

Get the Weekly Briefing - it's free!

✅ Join readers from Visa, Vanguard, and the FDIC.

Banking-as-a-Service (BaaS) Market Statistics

• The BaaS market reached $29.6 billion in 2025, up from $25.2 billion in 2024.
• API technology providers control 44.26% of the BaaS market revenue, making middleware the dominant segment.
• Cloud-based deployment accounts for over 55% of open banking platform implementations globally.
• On-premise BaaS deployments dropped below 30% market share in 2025 as banks migrated to hybrid cloud architectures.
• The BaaS market is projected to reach $65.78 billion by 2031, growing at a 17.83% CAGR from 2025.
• Large enterprises account for 62% of BaaS revenue, while small and mid-size banks are the fastest-growing adopter segment.
• Payment processing APIs represent the highest-volume BaaS product category, followed by account verification and lending APIs.
• North America leads BaaS adoption by revenue share, followed by Europe and Asia-Pacific.

Source: BIS, CFPB Public Data

Open Banking Adoption in Europe and the UK

• Europe leads global open banking adoption at 95% of banks, driven by mandatory PSD2 compliance enforced since 2018.
• The UK matches Europe at 95% adoption through the Open Banking Implementation Entity (OBIE) framework.
• Over 350 regulated third-party providers (TPPs) are registered under UK Open Banking as of early 2026.
• The European Commission proposed PSD3 in June 2023 to strengthen API standards and extend open banking to open finance.
• UK open banking payments grew 102% year over year in 2025, reaching over 18 million monthly transactions.
• Germany, France, and the Netherlands account for the highest API call volumes among EU member states.
• Over 7 million UK consumers and businesses actively use open banking-connected services.
• In Europe and the UK, open banking adoption hit 95% because compliance was non-negotiable.

Open Banking Adoption in the United States

• The US sits at 52% bank adoption, relying on market-led FDX standards rather than a regulatory mandate.
• The Financial Data Exchange (FDX) reported 114 million customer API connections in April 2025, up 50% from 76 million a year earlier.
• FDX added roughly 1 new connection every 0.26 seconds over that 12-month period.
• Over 1,000 data providers in the US and Canada share customer-permissioned data using FDX API standards.
• Screen scraping still accounts for an estimated 20% of consumer data sharing in the US, down from over 40% in 2022.
• In the US, nearly 52% of adults now use at least one open banking-enabled service such as budgeting apps, payment platforms, or lending tools.
• The top 10 US banks by assets all offer some form of consumer-permissioned data sharing API.
• Section 1033 enforcement would push the US adoption rate closer to European levels within 18 months of implementation, based on historical patterns in other markets.

Source: FDX, Statista, CFPB

Global Open Banking User Statistics

• The global open banking user base surpassed 470 million in 2025, targeting 600 million by 2027.
• Over 85% of banks worldwide have adopted open banking APIs in some form.
• India‘s Account Aggregator framework has onboarded over 1.1 billion accounts since 2021, making it the largest open data-sharing system by account volume.
• Brazil’s Open Finance ecosystem covers 95% of the country’s banking assets and holds 70 million+ consent records.
• Australia’s Consumer Data Right expanded beyond banking to the energy and telecom sectors in 2025.
• Asia-Pacific holds approximately 62% adoption for external banking APIs, with wide variation across individual markets.
• Nigeria launched its Open Banking framework in 2023, with over 30 licensed participants by early 2026.
• Singapore’s SGFinDex platform connects 7 government agencies and 11 banks for consumer financial data portability.
• Japan’s amended Banking Act enables API partnerships between banks and registered fintech firms, with over 130 agreements signed.

Open Banking API Call Volume Forecast

• Global open banking API calls are forecast to grow 427% from 137 billion in 2025 to 720 billion by 2029.
• The baseline in 2023 was 102 billion API calls, meaning volumes will increase roughly 7x in six years.
• Businesses reported a roughly 60% year-over-year increase in their own API call volumes in 2025.
• The global API management market is projected to reach $12.54 billion in 2026, reflecting infrastructure investment to handle growing volumes.
• Account verification and balance check calls represent over 65% of all open banking API requests globally.
• Payment initiation calls are growing faster than data-sharing calls, with 45% year-over-year growth in 2025.
• Peak API call volumes occur on the last business day of each month, driven by payroll and recurring payment processing.
• CoinLaw tracks API usage in financial services more broadly, and banking-specific volume growth outpaces the general API market.

Source: Juniper Research

UK Open Banking API Call Breakdown

• UK Open Banking recorded 2,233,344,487 total successful API calls in February 2026.
• That translates to approximately 860 successful API calls per second sustained throughout the month.
• AIS calls outnumber PIS calls by a ratio of roughly 13:1, reflecting data-sharing dominance over payment initiation.
• Rejected API calls accounted for just 0.122% of total calls in the UK’s February 2026 data.
• The 9 regulated providers and 20 banking brands report performance data monthly to UK Open Banking.
• Confirmation of Funds (CoF) calls, used for card-based payment verification, totaled over 301 million in February 2026.
• Monthly API call volumes grew roughly 35% year over year from February 2025 to February 2026.
• PIS call volumes are growing faster than AIS on a percentage basis, reflecting increased adoption of open banking payments.

Banking API Availability and Response Time

• UK Open Banking APIs maintained 99.59% average availability in February 2026.
• Weighted availability reached 99.98%, close to the “four nines” industry target of 99.99%.
• Core hours availability (06:00 to 00:00) was 99.73%, compared to 99.18% during non-core overnight hours.
• The 0.55 percentage point gap between core and non-core hours indicates scheduled overnight maintenance impacts.
• Average API response time was 328ms, above the mission-critical target of under 300ms.
• AIS endpoints averaged 312ms response time, faster than PIS endpoints at 415ms due to the additional authentication steps required for payments.
• The best-performing provider maintained 99.97% availability with a 185ms average response time.
• Providers falling below 99.5% availability face escalation under the Open Banking performance reporting framework.

Banking API Failure and Rejection Rates

• API call success rate was 99.46% across 9 providers and 20 banking brands in February 2026.
• Failed API calls totaled 12,159,692 in February 2026 out of over 2.2 billion total calls.
• Of failed calls, 82.1% were business failures (authorization errors, insufficient funds) and 17.9% were technical failures (timeouts, server errors).
• Business failure rate was 0.44%, within the industry target of under 0.5%.
• Technical failure rate was 0.10%, at the boundary of the industry target of under 0.1%.
• PIS endpoints had a higher failure rate (1.33%) than AIS endpoints (0.52%), driven by additional payment authorization checks.
• Timeout errors accounted for the largest share of technical failures at 58%, followed by server errors at 31%.
• Rejection rate stood at 0.122% of total calls, well within the target of under 0.15%.

Source: UK Open Banking (openbanking.org.uk)

Key finding: According to Financial Data Exchange data, 94 million consumer accounts were connected via FDX-compliant APIs as of January 2025, with FDX officially recognized as the US standard-setting body. Major aggregators Plaid, MX, and Yodlee together handle over 95% of data pulls on JPMorgan Chase systems under updated 2025 contracts.

Banking API Vulnerability Statistics

• API vulnerability exploitation grew 181% in 2025, the sharpest year-over-year increase on record.
• Over 11,000 API-related vulnerabilities were disclosed in 2025, representing 17% of all CVEs published that year.
• 43% of exploited vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog were API-related.
• Over 40,000 banking API incidents were reported in the first half of 2025 alone.
• 97% of banking API vulnerabilities can be exploited with a single unauthenticated request.
• In 59% of cases, no authentication was required to exploit the flaw.
• Banking and Financial Services saw a 149% year-over-year increase in vulnerability attacks, the highest growth among all industry sectors.
• Over 40% of organizations lack full visibility into their API endpoints, creating exploitable blind spots.
• Broken Object Level Authorization (BOLA) remained the most common API vulnerability class in 2025, appearing in 31% of reported incidents.

Source: Wallarm, CISA

Banking API Breach and Incident Data

• The 700Credit API breach in 2025 exposed data for 5.8 million consumers, demonstrating supply chain risk in banking API ecosystems.
• Global banking losses from cyber incidents topped $12 billion in 2025 (IBM Cost of a Data Breach Report).
• The average cost of a data breach in the financial sector reached $6.08 million in 2025, the second-highest across all industries.
• Tokenized authentication now covers 93% of all banking API sessions, up from an estimated 78% in 2023.
• API-related breaches took an average of 287 days to identify and contain, longer than the cross-industry average of 258 days.
• Supply chain API attacks, where a third-party provider is compromised, accounted for 23% of financial sector breaches in 2025.
• Financial regulators issued over 45 enforcement actions related to API security lapses in 2025 across the US, EU, and UK.
• Organizations with API security testing programs detected breaches 68 days faster on average than those without.

Source: IBM Cost of a Data Breach Report, Wallarm, CISA

Open Banking Regulation by Country

• The US is the only major market where the open banking mandate has stalled due to litigation.
• Europe enforced PSD2 in 2018 and is advancing PSD3 to extend requirements into open finance.
• Australia’s Consumer Data Right has been enforced since 2020 with mandatory API sharing for banking, energy, and telecom.
• Brazil’s Open Finance framework, enforced since 2021, is one of the most comprehensive globally, covering 95% of banking assets.
• India’s Account Aggregator framework operates via licensing rather than a broad mandate, with 1.1 billion+ accounts onboarded.
• Canada is developing its Consumer-Driven Banking framework, with legislation expected in 2026 or 2027.
• Saudi Arabia launched its Open Banking framework in 2023, mandating API standards for all licensed banks.
• Market-led adoption plateaus without regulatory enforcement, a pattern consistent across CoinLaw’s compliance coverage.

Source: European Commission, CFPB, Reserve Bank of India, Central Bank of Brazil

CFPB Section 1033 Status and Timeline

• The CFPB finalized Section 1033 in October 2024, requiring large banks to share consumer data via APIs.
• The original compliance deadline was April 1, 2026, but a federal judge paused enforcement after banking groups sued.
• Over 400 million consumer accounts were expected to fall under Section 1033 coverage.
• The CFPB invited comments on a revised rule in August 2025, signaling potential regulatory changes.
• The FDX API v6.4, released in Spring 2025, was designed partly to support Section 1033 technical requirements.
• Over 200 FDX member organizations are contributing to API standards development in anticipation of the rule’s eventual enforcement.
• The US 52% adoption rate reflects voluntary participation; mandatory enforcement would close the gap with Europe’s 95%.
• Large banks (over $250 billion in assets) were in the first compliance tier, followed by mid-size banks 12 months later.
• The rule requires banks to make data available in a standardized, machine-readable format within 1 business day of a consumer request.

Source: CFPB, FDX

Frequently Asked Questions (FAQs)

Conclusion

Banking API statistics paint a picture of rapid growth alongside significant challenges. The market is expanding at double-digit rates, API call volumes are forecast to grow over 600% by 2029, and adoption has reached 85% globally. Yet the security picture shows a 181% increase in exploitation and a regulatory divergence that splits the world into markets with mandatory open banking and those still debating it.

The performance data from the UK, one of the few markets publishing real-time API benchmarks, shows that banking APIs work reliably at scale: 99.46% success rates, 328ms average response times, and over 2 billion calls processed monthly. These numbers set the benchmark that other markets will need to match as open banking expands.

Looking ahead, the resolution of Section 1033 in the US will determine whether the 400 million consumer accounts expected under its coverage join the open banking ecosystem on a regulatory or voluntary timeline. Based on the patterns we have tracked across our retail investing and fintech coverage, regulatory enforcement consistently accelerates both adoption and infrastructure investment within 12 to 18 months of taking effect.