SEC filings · computed from SEC EDGAR filings dataset; nothing on this page is written by a model. All ranked answers: /banks/leaders
On the public record as of Oct 31, 2026, 75 of the 141 large banks profiled have a verbatim filing statement about AI-enabled cyber attacks or fraud. Ranked by quotes (filings), the top 5 are Ally (6 filing quotes), Regions (5 filing quotes), Amex (5 filing quotes), Zions (5 filing quotes) and Renasant (5 filing quotes). Ally's strongest evidence: Ally says frontier and emerging AI models are rapidly raising the speed, scale, and complexity of cyber threats across financial services. (Form 10-Q, MD&A, filed Jul 23, 2026).
141 banks profiled (120 US, 21 non-US) · 75 with matching evidence · top 40 shown · ranked answer, not a comparison
Which of the large banks warn of AI-enabled cyber and fraud threats in their SEC filings?
| # | Bank | Quotes (filings) | Latest statement (extractor's one-line claim) | Status | Date | On this site | Sources |
|---|---|---|---|---|---|---|---|
| 1 | Ally | 6 | Ally says frontier and emerging AI models are rapidly raising the speed, scale, and complexity of cyber threats across financial services. (Form 10-Q, MD&A, filed Jul 23, 2026) | 5 filings | Jul 23, 2026 | Ally · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 2 | Regions | 5 | Regions says it uses machine learning and AI models to detect and prevent fraud, protecting customers, the bank and shareholders. (Form 8-K, 8-K exhibit, filed May 5, 2025) | 5 filings | May 5, 2025 | Regions · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 3 | Amex | 5 | Amex warns that cyberattacks it faces include AI-assisted deepfakes and attacks exploiting vulnerabilities in AI models. (Form 10-Q, MD&A, filed Oct 23, 2026) | 4 filings | Oct 23, 2026 | Amex · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 4 | Zions | 5 | Zions flags increasingly sophisticated AI-enabled attacks as a threat its technology controls must detect and withstand. (Form 10-Q, MD&A, filed Aug 6, 2026) | 4 filings | Aug 6, 2026 | Zions · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 5 | Renasant | 5 | Renasant lists sophisticated attacks using AI as a source of increased cybersecurity risk that could cause breaches or financial losses. (Form 8-K, 8-K exhibit, filed Jul 28, 2026) | 4 filings | Jul 28, 2026 | Renasant · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 6 | PNC | 5 | PNC credits generative AI and AI-powered search deployments, alongside cybersecurity measures, with strengthening enterprise productivity and security. (Form DEF 14A, proxy, filed Mar 11, 2026) | 4 filings | Mar 11, 2026 | PNC · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 7 | Goldman | 5 | Goldman warns that bad actors using generative AI for fraud or cyber attacks could cause losses and outflows for it and its clients. (Form 10-K, risk factors, filed Feb 25, 2026) | 4 filings | Feb 25, 2026 | Goldman · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 8 | HSBC USA | 5 | HSBC USA warns criminals may use AI to perpetrate fraud, particularly scams, while AI could also support financial crime detection. (Form 10-K, risk factors, filed Feb 25, 2026) | 3 filings | Feb 25, 2026 | HSBC USA · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 9 | U.S. Bank | 5 | U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026) | 3 filings | Feb 23, 2026 | U.S. Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 10 | Valley | 4 | Valley uses machine-learning models to segment risk and identify wire fraud, reducing false positives in AML alert review. (Form 8-K, 8-K exhibit, filed Oct 22, 2026) | 4 filings | Oct 22, 2026 | Valley · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 11 | BofA | 4 | Bank of America warns AI lowers barriers to cyberattacks and makes social engineering harder to detect. (Form 10-K, risk factors, filed Feb 25, 2026) | 4 filings | Feb 25, 2026 | BofA · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 12 | Axos Bank | 4 | Axos says bad actors' use of AI exposes it to fraud, fund misappropriation, and cyberattack risks. (Form 10-K, risk factors, filed Aug 20, 2026) | 3 filings | Aug 20, 2026 | Axos Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 13 | Seacoast Bank | 4 | Seacoast warns criminals are using AI to steal identities and impersonate clients, making fraud harder to detect. (Form 10-K, risk factors, filed Feb 27, 2026) | 3 filings | Feb 27, 2026 | Seacoast Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 14 | Citi | 4 | Citi warns that malicious actors' use of sophisticated AI has increased fraud, identity theft and cyberattack risk. (Form 10-K, risk factors, filed Feb 20, 2026) | 3 filings | Feb 20, 2026 | Citi · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 15 | WaFd Bank | 3 | WaFd lists its ability to address cyber-security risks, including through artificial intelligence, among forward-looking risk factors. (Form 8-K, 8-K exhibit, filed Oct 16, 2026) | 3 filings | Oct 16, 2026 | WaFd Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 16 | Wells Fargo | 3 | Wells Fargo says recent AI advances make it easier to find and exploit cybersecurity vulnerabilities, raising information security risk for customers and industries. (Form 10-Q, MD&A, filed Apr 29, 2026) | 3 filings | Apr 29, 2026 | Wells Fargo · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 17 | First Horizon | 3 | First Horizon warns that AI may further enhance the effectiveness of cyber criminals' techniques. (Form 10-K, risk factors, filed Feb 26, 2026) | 3 filings | Feb 26, 2026 | First Horizon · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 18 | Capital One | 3 | Capital One says generative AI such as synthetic video and identity documents may introduce new identity fraud and scam risks. (Form 10-Q, risk factors, filed Jul 31, 2025) | 3 filings | Jul 31, 2025 | Capital One · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 19 | Glacier | 3 | Glacier says bad actors' use of AI creates increasingly sophisticated security threats to its and its customers' data. (Form 10-K, risk factors, filed Feb 25, 2026) | 2 filings | Feb 25, 2026 | Glacier · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 20 | Fifth Third | 3 | Fifth Third warns that AI use by attackers makes cyber-attacks harder to detect and increases their risk. (Form 10-K, risk factors, filed Feb 24, 2026) | 2 filings | Feb 24, 2026 | Fifth Third · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 21 | First Hawaiian | 3 | First Hawaiian says cybercriminals' growing use of AI may increase the frequency and severity of attacks on it and its service providers. (Form 10-K, risk factors, filed Feb 28, 2025) | 2 filings | Feb 28, 2025 | First Hawaiian · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 22 | Central Bank | 2 | Central Bank says it monitors AI-related cybersecurity and fraud risks, which did not materially affect results this quarter. (Form 10-Q, MD&A, filed May 15, 2026) | 2 filings | May 15, 2026 | Central Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 23 | Western Alliance | 2 | Western Alliance plans to use AI to enhance cyber defense and protect itself from AI-enabled threats while broadening AI use cases. (Form 8-K, 8-K exhibit, filed May 12, 2026) | 2 filings | May 12, 2026 | Western Alliance · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 24 | Citizens Business Bank | 2 | The company notes that cybersecurity and fraud risks for banks grew, partly because malicious actors are deploying enhanced AI capabilities. (Form DEF 14A, proxy, filed Apr 7, 2026) | 2 filings | Apr 7, 2026 | Citizens Business Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 25 | Texas Capital | 2 | Texas Capital engaged external firms to conduct AI defense assessments as part of strengthening its cybersecurity defenses. (Form DEF 14A, proxy, filed Mar 12, 2026) | 2 filings | Mar 12, 2026 | Texas Capital · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 26 | Pinnacle | 2 | Pinnacle says generative AI is increasing cybersecurity risk by making fraud detection harder, especially voice recognition and authentication devices. (Form 10-K, risk factors, filed Mar 2, 2026) | 2 filings | Mar 2, 2026 | Pinnacle · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 27 | Rockland Trust | 2 | Independent Bank views cybercriminals' use of AI, including deepfakes, as a major concern. (Form 10-K, risk factors, filed Feb 27, 2026) | 2 filings | Feb 27, 2026 | Rockland Trust · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 28 | Busey Bank | 2 | Busey says generative AI enables more sophisticated impersonation and fraud, requiring stronger controls and monitoring. (Form 10-K, risk factors, filed Feb 26, 2026) | 2 filings | Feb 26, 2026 | Busey Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 29 | Schwab | 2 | Schwab warns that publicly available AI has increased external fraud risk, including impersonation to access client accounts. (Form 10-K, risk factors, filed Feb 25, 2026) | 2 filings | Feb 25, 2026 | Schwab · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 30 | SouthState | 2 | SouthState reports rising fraud attempts in 2025 and expects AI-enabled malware and phishing to accelerate them. (Form 10-K, risk factors, filed Feb 20, 2026) | 2 filings | Feb 20, 2026 | SouthState · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 31 | JPMorgan | 2 | JPMorgan says it has seen rising cyber attacks and expects more, with attackers using emerging technologies including AI. (Form 10-K, MD&A, filed Feb 13, 2026) | 2 filings | Feb 13, 2026 | JPMorgan · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 32 | Hilltop | 2 | Hilltop says third parties' growing use of AI raises cyber-attack risk to Hilltop and its vendors. (Form 10-K, risk factors, filed Feb 13, 2026) | 2 filings | Feb 13, 2026 | Hilltop · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 33 | Associated | 2 | Associated expects AI to increase the frequency and effectiveness of cybersecurity threats it faces. (Form 10-K, risk factors, filed Feb 12, 2026) | 2 filings | Feb 12, 2026 | Associated · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 34 | Raymond James | 2 | Raymond James reports large volumes of AI-assisted phishing and social engineering attempts aimed at defrauding the firm, its staff, and clients. (Form 10-K, risk factors, filed Nov 25, 2025) | 2 filings | Nov 25, 2025 | Raymond James · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 35 | Columbia | 2 | Columbia warns AI-enabled fraud or cyberattacks could spark panic at institutions and threaten financial stability. (Form 10-K, risk factors, filed Feb 25, 2025) | 2 filings | Feb 25, 2025 | Columbia · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 36 | Nicolet | 2 | Nicolet says new AI technologies present significant cybersecurity risks that must be analyzed and addressed before implementation. (Form 10-K, risk factors, filed Feb 25, 2025) | 2 filings | Feb 25, 2025 | Nicolet · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 37 | First Citizens | 2 | First Citizens notes a U.S. Treasury report warned banks about AI-based tools and threat actors using AI for targeted cyberattacks. (Form 10-K, business, filed Feb 21, 2025) | 2 filings | Feb 21, 2025 | First Citizens · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 38 | First Financial Bank | 2 | The bank warns that AI tools can raise cybersecurity risk and expose information, and that use without adequate expertise increases risk for users. (Form 10-K, risk factors, filed Feb 19, 2026) | 1 filing | Feb 19, 2026 | First Financial Bank · in their words → | SEC EDGAR ↗ |
| 39 | Frost | 2 | Frost says its adoption of artificial intelligence increases its exposure to cyber-attacks. (Form 10-K, risk factors, filed Feb 5, 2026) | 1 filing | Feb 5, 2026 | Frost · in their words → | SEC EDGAR ↗ |
| 40 | Bread Financial | 2 | Bread Financial says generative AI tools such as synthetic voice have introduced new identity fraud risks. (Form 10-K, risk factors, filed Feb 14, 2025) | 1 filing | Feb 14, 2025 | Bread Financial · in their words → | SEC EDGAR ↗ |
Each row quotes one record from SEC EDGAR filings dataset; the “On this site” link opens the bank's own page or sub-page with every source. Banks absent from the table have nothing matching on the record this site holds.
How is this ranked?
Data: the SEC filings dataset (data/sec/quotes.jsonl): verbatim AI statements from 10-K, 10-Q, 8-K and DEF 14A filings of the banks' holding companies, each with its EDGAR link, filing date, section and topic.
Rule: Quotes classified as AI-enabled cyber and fraud threats. Score = such quotes; ties by distinct filings, then the newest filing.
Counts: 75 of 141 profiled banks qualify; the table shows the top 40; 77 distinct sources cited in the table. Data checked 2026-10-31; ranking template updated 2026-10-30.
What are the caveats?
The dataset holds the AI passages the extractor found in filings since January 2024; a bank with few quotes may say more in passages not captured. Quotes are verbatim; the one-line claim is the extractor's summary and links the EDGAR text.
Banks without a US SEC filer (most non-US groups, private and mutual banks) have no quotes and are absent.
Banks absent from the table have nothing matching on the record this site holds, which is not evidence that they do nothing. Each row links the bank's own page, where every entry carries its sources.
Which bank ranks first?
Ally Financial leads with 6 filing quotes: Ally says frontier and emerging AI models are rapidly raising the speed, scale, and complexity of cyber threats across financial services. (Form 10-Q, MD&A, filed Jul 23, 2026). Regions is second with 5.
How many large banks warn of AI-enabled cyber and fraud threats in filings?
75 of the 141 profiled banks (120 US, 21 non-US groups); the table shows the top 40. Among those listed, 40 are US banks and 0 non-US groups.
What counts, and what does not?
Quotes classified as AI-enabled cyber and fraud threats. Score = such quotes; ties by distinct filings, then the newest filing. Source: the SEC filings dataset (data/sec/quotes.jsonl): verbatim AI statements from 10-K, 10-Q, 8-K and DEF 14A filings of the banks' holding companies, each with its EDGAR link, filing date, section and topic.
Is this a measure of capability?
No. Every row is a sourced fact on the public record: what the bank, a regulator, a filing or an independent outlet has put on the record. The page does not rate how well anything works.
When was this checked, and how often does it update?
The data behind the table was last checked on 2026-10-31 (SEC EDGAR filings dataset). The page recomputes whenever that dataset changes and is republished with the site; it is never edited by hand.
When any of these banks moves on AI, you'll read it the next morning.
when one of the banks we cover moves on AI, it is in the next morning's brief · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning