CaixaBank, S.A.

Income comes mainly from the spread between what it pays for deposits and other funding and what it earns on loans and investments, topped up by fee income from wealth management, insurance, payments and banking services. Most of that income is generated by its core domestic banking-and-insurance business, with a smaller share coming from its Portuguese subsidiary.

It scales by expanding a leveraged balance sheet rather than by building physical capacity, so how much it can grow depends on how much deposit and wholesale funding it can attract and how large a capital buffer it can maintain against those liabilities. Its recent record shows earnings and book value growing steadily rather than eroding, consistent with a capital base that has been compounding rather than shrinking.

The business depends on customer deposits and on wholesale funding raised through debt issuance and equity to supply the money it lends and invests. It also depends on outside providers of IT systems, cloud services and other outsourced infrastructure to keep its operations running, on its ability to attract and retain skilled staff, and, by its own account, it carries concentration exposure to particular countries, sectors, customers, counterparties and products.

In its own account, a wide range of customer segments depends on it for everyday banking, financing, savings and insurance: individuals, premier and private banking clients, small businesses and entrepreneurs, larger corporate and institutional clients, and customers served through its international network. The company itself names the breadth of its customer base as one of its own competitive strengths.

Running a deposit-funded lending business at a margin is a very common structural shape: several hundred other institutions run the same kind of system, so the basic model is not on its own a distinguishing feature. The company's own account instead points to the scale of its customer base and its branch and digital network in its home market, and to selling insurance and asset-management products through those same banking relationships, as the basis for the leading domestic position it claims. Whether rivals could reproduce that combination is not something this evidence can support a claim about.

As a lender that earns its income from the spread between funding costs and asset returns while carrying leverage, the general economic limit on businesses built this way is the size of the capital and equity cushion behind that leverage, relative to the credit quality of what it has lent against. This is a general pattern CompanyGraph tests against many similar lenders, applied here as a hypothesis rather than something measured directly for this company. Separately, the company's own account of what limits its growth points to the availability of skilled staff it can attract, train and retain, and to its ability to keep funding the technology investment its infrastructure needs.

In its own disclosures, the company names credit risk, meaning losses if borrowers cannot repay, as the most significant risk to its balance sheet, alongside geopolitical and macroeconomic shocks, cybercrime and information-security breaches, and adverse legal or regulatory change as its top-ranked risk events. It also flags its own reliance on outside providers of IT and cloud infrastructure, and concentration in particular countries, sectors, customers, counterparties or products, as conditions that could turn a localized shock into a broader one.

It operates under direct supervision from its banking and securities regulators, which shapes its capital, conduct and disclosure obligations, and it must comply with international financial-sanctions and customer-screening rules across the countries where it operates, alongside ongoing consumer-lending litigation over historic mortgage and credit-card terms and some exposure to foreign currencies beyond its home currency. In its own risk disclosures it ranks geopolitical and macroeconomic shocks, new competitors and technologies, cybercrime, and adverse legal or regulatory change at the top, and separately names credit risk as the most significant risk to its balance sheet.