How many prompt injection AI incidents have banks had since 2022?
As of Oct 21, 2026, the register holds 1 publicly reported AI incident at banks and fintechs in the prompt injection category since January 2022. 1 of the 1 record involves systems the institution or a regulator described as AI; 0 are automated systems not described as AI. Countries: Several countries (1). Average severity 2.0 on a 1–5 scale. Status: 1 reported. The most recent is "Morse-code prompt injection via Grok makes AI wallet agent Bankrbot send about $150,000-200,000 in tokens" (May 4, 2026).
Incidents
| Date | Institution | Incident | AI? | Role | Category | Severity | Status |
|---|---|---|---|---|---|---|---|
| May 4, 2026 | Bankr (Bankrbot), xAI (Grok) | Morse-code prompt injection via Grok makes AI wallet agent Bankrbot send about $150,000-200,000 in tokens | AI (stated) | Institution's own AI | Prompt injection | 2 | Reported |
Navigate
When AI goes wrong at a bank, the next morning's brief says so.
when one of these regulators moves, the next morning's brief says so · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning