Bundesbank Reports Record German Bank Earnings in 2025 Amid Rising Credit and Cyber Risks

Key Takeaways

• The Deutsche Bundesbank reports that German credit institutions posted aggregated pre-tax profit of EUR $52.3 Billion in 2025, the third consecutive year of high earnings, with operating income at a record EUR $172.5 Billion.
• Growth was driven largely by one major bank, and the Bundesbank warns that credit risk, cyber threats, and competitive pressure will keep 2026 challenging.
• Compliance and risk teams should treat the report as a supervisory signal on where scrutiny is likely to focus, not as a source of new obligations.

Deep Dive

The Deutsche Bundesbank reports that German credit institutions posted aggregated pre-tax profit of EUR $52.3 Billion in 2025, the third consecutive year of high earnings, with operating income at a record EUR $172.5 Billion. Growth was driven largely by one major bank, and the Bundesbank warns that credit risk, cyber threats, and competitive pressure will keep 2026 challenging. Compliance and risk teams should treat the report as a supervisory signal on where scrutiny is likely to focus, not as a source of new obligations.

Several themes carry practical implications. Credit risk is rising amid a sluggish economy and US tariff-related uncertainty. German banks have already tightened lending guidelines across all credit segments, and corporate lending has not recovered. Compliance and credit risk functions should check that tighter standards are applied consistently, documented, and aligned with risk appetite statements, and that provisioning, early-warning indicators, and stress testing reflect the weaker environment. Administrative and personnel costs rose considerably in 2025, which may increase pressure on compliance budgets and headcount even as income grows. Teams should be ready to justify resourcing with risk-based arguments.

The report also names IT security, particularly cyberattacks, as a growing threat to profitability in 2026. For institutions in scope of DORA, this reinforces the importance of ICT risk management, incident reporting, resilience testing, and third-party oversight. Competitive pressure from direct banks and new market entrants may push firms toward rapid product launches and digital channels, which raises conduct, AML/onboarding, and operational risk concerns. Ongoing consolidation, with fewer institutions and branches, also points to integration and restructuring risk, including inherited control weaknesses and outsourcing dependencies.

Recommended actions: (1) brief senior management and the board on the report's risk themes, noting that record profits do not reduce supervisory expectations; (2) review credit risk controls, lending standards, and provisioning assumptions against the 2026 outlook; (3) validate DORA and cyber resilience readiness, including scenario testing; (4) confirm that new-product and digital-channel approval processes include compliance review; and (5) include trade policy and geopolitical shocks in stress-testing and horizon scanning. No compliance deadlines are tied to this report. The overall impact is low for direct obligations and moderate as a risk-prioritization input.

Source: Deutsche Bundesbank