How many AI incidents did banks have in 2026? As of Oct 21, 2026, the register holds 15 publicly reported AI incidents at banks and fintechs dated 2026. 8 of the 15 records involve systems the institution or a regulator described as AI; 1 is an automated system not described as AI, and 6 are machine-learning systems not labelled AI on the record. Countries: United States (4), United Kingdom (3), Italy (2). Average severity 2.3 on a 1–5 scale. Status: 5 reported, 6 confirmed by the institution, 1 regulator finding, 2 court filing, 1 disputed. The most recent is "U.S. Bank customers sue Pegasystems alleging its Voice AI secretly analysed their customer-service calls" (Oct 2, 2026).
AI incidents at banks and fintechs by month since January 2022, by whose AI it was One dot per incident, 15 in all: Oct 2, 2026: U.S. Bank National Association (named in the complaint, not a defendant) — U.S. Bank customers sue Pegasystems alleging its Voice AI secretly analysed their customer-service calls (Litigation, severity 2 of 5); Sep 29, 2026: Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank and Yegaram Savings Bank — AI-agent-assisted intrusions breach Shinhan, KB Kookmin, Hana and 13 other Korean financial firms (Other, severity 5 of 5); Sep 17, 2026: Libra Internet Bank — Libra Internet Bank's OpenAI-based assistant 'Lia' calls a customer an 'idiot' (Chatbot failure, severity 1 of 5); Jul 3, 2026: NatWest Group — Deepfake image of NatWest CEO Paul Thwaite spread on X as scam bait (Brand impersonation, severity 1 of 5); Jun 22, 2026: Deutsche Bank National Trust Company (as trustee) — D.C. Court of Appeals strikes Deutsche Bank National Trust brief citing four AI-invented cases (Litigation, severity 2 of 5); Jun 3, 2026: Monzo and Barclays — AI-generated 'Monzo Slots' and 'Barclays Slots' casino ads impersonate UK banks on social media (Brand impersonation, severity 1 of 5); May 13, 2026: Klarna and Pagaya Technologies — Pagaya sues Klarna, alleging it 'distilled' and misappropriated its AI underwriting model (Litigation, severity 2 of 5); May 5, 2026: CB Financial Services, Inc. (Community Bank, Carmichaels, PA) — Community Bank files 8-K after an employee put customer SSNs into an unauthorized AI app (Data leak to an LLM, severity 3 of 5); May 4, 2026: Bankr (Bankrbot) and xAI (Grok) — Morse-code prompt injection via Grok makes AI wallet agent Bankrbot send about $150,000-200,000 in tokens (Prompt injection, severity 2 of 5); May 2026: Lloyds Bank — Lloyds refunds estate of 82-year-old customer lured by an AI Farage deepfake investment scam (Deepfake fraud, severity 2 of 5); Apr 2026: Westpac New Zealand and Kiwibank — Deepfakes of Westpac NZ and Kiwibank chief executives used in Facebook investment-scam ads (Brand impersonation, severity 1 of 5); Mar 12, 2026: Intesa Sanpaolo S.p.A. and Isybank S.p.A. — Italy's privacy regulator fines Intesa Sanpaolo €17.6m for profiling 2.4m customers to move them to Isybank (Regulatory finding, severity 3 of 5); Feb 26, 2026: Commonwealth Bank of Australia — Commonwealth Bank refers about A$1bn of suspect home loans, some reportedly AI-forged, to police (Other, severity 3 of 5); Feb 2026: Fideuram - Intesa Sanpaolo Private Banking and Intesa Sanpaolo — Fideuram wires €95m after fake Intesa CEO messages and an AI-cloned lawyer's voice (Voice clone, severity 4 of 5); Jan 2026: Klarna — Klarna processed payments for nine months for shops advertising with celebrity deepfakes (Deepfake fraud, severity 2 of 5). Institution's own AI May 4, 2026: Bankr (Bankrbot) and xAI (Grok) — Morse-code prompt injection via Grok makes AI wallet agent Bankrbot send about $150,000-200,000 in tokens (Prompt injection, severity 2 of 5) Sep 17, 2026: Libra Internet Bank — Libra Internet Bank's OpenAI-based assistant 'Lia' calls a customer an 'idiot' (Chatbot failure, severity 1 of 5) AI used against the institution Jan 2026: Klarna — Klarna processed payments for nine months for shops advertising with celebrity deepfakes (Deepfake fraud, severity 2 of 5) Feb 2026: Fideuram - Intesa Sanpaolo Private Banking and Intesa Sanpaolo — Fideuram wires €95m after fake Intesa CEO messages and an AI-cloned lawyer's voice (Voice clone, severity 4 of 5) Feb 26, 2026: Commonwealth Bank of Australia — Commonwealth Bank refers about A$1bn of suspect home loans, some reportedly AI-forged, to police (Other, severity 3 of 5) Apr 2026: Westpac New Zealand and Kiwibank — Deepfakes of Westpac NZ and Kiwibank chief executives used in Facebook investment-scam ads (Brand impersonation, severity 1 of 5) May 2026: Lloyds Bank — Lloyds refunds estate of 82-year-old customer lured by an AI Farage deepfake investment scam (Deepfake fraud, severity 2 of 5) Jun 3, 2026: Monzo and Barclays — AI-generated 'Monzo Slots' and 'Barclays Slots' casino ads impersonate UK banks on social media (Brand impersonation, severity 1 of 5) Jul 3, 2026: NatWest Group — Deepfake image of NatWest CEO Paul Thwaite spread on X as scam bait (Brand impersonation, severity 1 of 5) Sep 29, 2026: Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank and Yegaram Savings Bank — AI-agent-assisted intrusions breach Shinhan, KB Kookmin, Hana and 13 other Korean financial firms (Other, severity 5 of 5) Governance finding Mar 12, 2026: Intesa Sanpaolo S.p.A. and Isybank S.p.A. — Italy's privacy regulator fines Intesa Sanpaolo €17.6m for profiling 2.4m customers to move them to Isybank (Regulatory finding, severity 3 of 5) May 5, 2026: CB Financial Services, Inc. (Community Bank, Carmichaels, PA) — Community Bank files 8-K after an employee put customer SSNs into an unauthorized AI app (Data leak to an LLM, severity 3 of 5) May 13, 2026: Klarna and Pagaya Technologies — Pagaya sues Klarna, alleging it 'distilled' and misappropriated its AI underwriting model (Litigation, severity 2 of 5) Jun 22, 2026: Deutsche Bank National Trust Company (as trustee) — D.C. Court of Appeals strikes Deutsche Bank National Trust brief citing four AI-invented cases (Litigation, severity 2 of 5) Oct 2, 2026: U.S. Bank National Association (named in the complaint, not a defendant) — U.S. Bank customers sue Pegasystems alleging its Voice AI secretly analysed their customer-service calls (Litigation, severity 2 of 5) 2022 2023 2024 2025 2026 One dot per incident · lanes by AI role · dot size = severity 1–5 · click a dot for the record · computed from the register Date Institution Incident AI? Role Category Severity Status Oct 2, 2026 U.S. Bank National Association (named in the complaint, not a defendant) U.S. Bank customers sue Pegasystems alleging its Voice AI secretly analysed their customer-service calls AI (stated) Governance finding Litigation Court filing Sep 29, 2026 Shinhan Bank , KB Kookmin Bank , Hana Bank , BNK Busan Bank , Yegaram Savings Bank AI-agent-assisted intrusions breach Shinhan, KB Kookmin, Hana and 13 other Korean financial firms ML (inferred) AI used against the institution Other Reported Sep 17, 2026 Libra Internet Bank Libra Internet Bank's OpenAI-based assistant 'Lia' calls a customer an 'idiot' AI (stated) Institution's own AI Chatbot failure Confirmed by the institution Jul 3, 2026 NatWest Group Deepfake image of NatWest CEO Paul Thwaite spread on X as scam bait ML (inferred) AI used against the institution Brand impersonation Confirmed by the institution Jun 22, 2026 Deutsche Bank National Trust Company (as trustee) D.C. Court of Appeals strikes Deutsche Bank National Trust brief citing four AI-invented cases AI (stated) Governance finding Litigation Court filing Jun 3, 2026 Monzo , Barclays AI-generated 'Monzo Slots' and 'Barclays Slots' casino ads impersonate UK banks on social media AI (stated) AI used against the institution Brand impersonation Confirmed by the institution May 13, 2026 Klarna , Pagaya Technologies Pagaya sues Klarna, alleging it 'distilled' and misappropriated its AI underwriting model AI (stated) Governance finding Litigation Disputed May 5, 2026 CB Financial Services, Inc. (Community Bank, Carmichaels, PA) Community Bank files 8-K after an employee put customer SSNs into an unauthorized AI app AI (stated) Governance finding Data leak to an LLM Confirmed by the institution May 4, 2026 Bankr (Bankrbot) , xAI (Grok) Morse-code prompt injection via Grok makes AI wallet agent Bankrbot send about $150,000-200,000 in tokens AI (stated) Institution's own AI Prompt injection Reported May 2026 Lloyds Bank Lloyds refunds estate of 82-year-old customer lured by an AI Farage deepfake investment scam ML (inferred) AI used against the institution Deepfake fraud Confirmed by the institution Apr 2026 Westpac New Zealand , Kiwibank Deepfakes of Westpac NZ and Kiwibank chief executives used in Facebook investment-scam ads AI (stated) AI used against the institution Brand impersonation Confirmed by the institution Mar 12, 2026 Intesa Sanpaolo S.p.A. , Isybank S.p.A. Italy's privacy regulator fines Intesa Sanpaolo €17.6m for profiling 2.4m customers to move them to Isybank Automation, not AI Governance finding Regulatory finding Regulator finding Feb 26, 2026 Commonwealth Bank of Australia Commonwealth Bank refers about A$1bn of suspect home loans, some reportedly AI-forged, to police ML (inferred) AI used against the institution Other Reported Feb 2026 Fideuram - Intesa Sanpaolo Private Banking , Intesa Sanpaolo Fideuram wires €95m after fake Intesa CEO messages and an AI-cloned lawyer's voice ML (inferred) AI used against the institution Voice clone Reported Jan 2026 Klarna Klarna processed payments for nine months for shops advertising with celebrity deepfakes ML (inferred) AI used against the institution Deepfake fraud Reported
When AI goes wrong at a bank, the next morning's brief says so. when one of these regulators moves, the next morning's brief says so · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning