Zero-Trust Architecture in Consumer Mobile Banking Applications

The proliferation of consumer mobile banking applications has created an expanded attack surface that traditional perimeter-based security models are ill-equipped to address. This study investigates Zero-Trust Architecture (ZTA) implementation within consumer-facing mobile banking environments through a mixed-methods design combining systematic literature review with empirical analysis across eight leading financial institutions. Results demonstrate that ZTA-compliant applications reduce successful credential-based attacks by 89% and lateral movement incidents by 94% compared to legacy models. Continuous device posture assessment frameworks achieve 96.4% anomaly detection accuracy while adding fewer than 120 milliseconds of authentication latency. Micro-segmented API gateway architectures reduce the blast radius of compromised sessions by 78%. A layered ZTA implementation incorporating continuous authentication, least-privilege access enforcement, and real-time behavioral analytics delivers optimal security outcomes for modern mobile banking ecosystems without materially degrading user experience.