Which large banks have had publicly reported AI incidents?

Data checked Oct 24, 2026 · 25 of 141 banks qualify · 31 sources cited · template updated Oct 30, 2026

AI incidents · computed from AI incidents register; nothing on this page is written by a model. All ranked answers: /banks/leaders

On the public record as of Oct 24, 2026, 25 of the 141 large banks profiled appear in at least one dated record of the AI incidents register. Ranked by register records, the top 5 are JPMorgan (5 records), BofA (5 records), Wells Fargo (5 records), Citi (3 records) and Schwab (3 records). JPMorgan's strongest evidence: Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026).

141 banks profiled (120 US, 21 non-US) · 25 with matching evidence · ranked answer, not a comparison

Which of the large banks have had publicly reported AI incidents?

Checked 2026-10-24 · AI incidents register
#BankRegister recordsLatest recordStatusDateOn this siteSources
1JPMorgan5Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026)Reported · severity 2/5Oct 22, 2026JPMorgan · AI incidents →Axios ↗ · U.S. District Court, D. Mass. (via Massachusetts Lawyers Weekly) ↗
2BofA5Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026)Reported · severity 2/5Oct 22, 2026BofA · AI incidents →Axios ↗ · ABC7 News (KGO-TV) ↗
3Wells Fargo5Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026)Reported · severity 2/5Oct 22, 2026Wells Fargo · AI incidents →Axios ↗ · VICE (Motherboard) ↗
4Citi3Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026)Reported · severity 2/5Oct 22, 2026Citi · AI incidents →Axios ↗ · Financial Conduct Authority (Final Notice) ↗
5Schwab3Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026)Reported · severity 2/5Oct 22, 2026Schwab · AI incidents →Axios ↗ · CourtListener (U.S. District Court, S.D. Cal. docket) ↗
6Commonwealth Bank3Commonwealth Bank refers about A$1bn of suspect home loans, some reportedly AI-forged, to police (reported, Feb 26, 2026)Reported · severity 3/5Feb 26, 2026Commonwealth Bank · AI incidents →Australian Financial Review ↗ · ABC News ↗
7Lloyds3Lloyds refunds estate of 82-year-old customer lured by an AI Farage deepfake investment scam (confirmed by the institution, May 1, 2026)Confirmed by the institution · severity 2/5Sep 25, 2026Lloyds · AI incidents →News & Star ↗ · BBC News ↗
8TD Bank Group2TD customer, 88, loses C$450,000 to a scam that began with a Mark Carney deepfake; bank won't reimburse him (reported, May 1, 2025)Reported · severity 3/5Oct 19, 2026TD Bank Group · AI incidents →CBC News (Go Public) ↗ · U.S. Department of Justice ↗
9TD2TD Bank pleads guilty after excluding 92% of US transaction volume from its automated AML monitoring (settled, Oct 10, 2024)Settled · severity 5/5Oct 10, 2024TD · AI incidents →U.S. Department of Justice ↗ · CourtListener (U.S. District Court, S.D. Cal. docket) ↗
10Barclays2AI-generated 'Monzo Slots' and 'Barclays Slots' casino ads impersonate UK banks on social media (confirmed by the institution, Jun 3, 2026)Confirmed by the institution · severity 1/5Jun 3, 2026Barclays · AI incidents →Cybernews ↗ · High Court of England and Wales (The National Archives, Find Case Law) ↗
11ING2Dutch human-rights institute finds ING's automated payment screening discriminated over non-Dutch names (regulator finding, Jul 25, 2024)Regulator finding · severity 3/5Jul 25, 2024ING · AI incidents →College voor de Rechten van de Mens (Netherlands Institute for Human Rights) ↗ · ING ↗
12NatWest2Deepfake image of NatWest CEO Paul Thwaite spread on X as scam bait (confirmed by the institution, Jul 3, 2026)Confirmed by the institution · severity 1/5Jul 3, 2026NatWest · AI incidents →City AM ↗ · Financial Ombudsman Service ↗
13Banco Santander2Deepfake ads clone Santander chair Ana Botín's voice to push fake investment platforms (reported, Jul 1, 2025)Reported · severity 1/5Jul 31, 2025Banco Santander · AI incidents →Maldita.es ↗ · BBC News ↗
14Capital One2Capital One caller sued Amazon Web Services over Amazon Connect voiceprints and call recording (court filing, Mar 31, 2023)Court filing · severity 1/5Mar 31, 2023Capital One · AI incidents →U.S. District Court, W.D. Wash. (via CourtListener RECAP) ↗ · CourtListener (U.S. District Court, S.D. Cal. docket) ↗
15SoFi1FINRA fines SoFi $1.1m after fraudsters beat its largely automated account-opening checks (settled, May 2, 2024)Settled · severity 3/5May 2, 2024SoFi · AI incidents →FINRA ↗
16Webster1Breach at ML fraud-analytics vendor Guardian Analytics exposes Webster Bank customers' data (settled, Nov 27, 2022)Settled · severity 3/5Apr 18, 2023Webster · AI incidents →Connecticut Office of the Attorney General ↗
17U.S. Bank1U.S. Bank customers sue Pegasystems alleging its Voice AI secretly analysed their customer-service calls (court filing, Oct 2, 2026)Court filing · severity 2/5Oct 2, 2026U.S. Bank · AI incidents →CourtListener (U.S. District Court, D. Mass. docket) ↗
18Morgan Stanley1Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026)Reported · severity 2/5Oct 22, 2026Morgan Stanley · AI incidents →Axios ↗
19Deutsche Bank (U.S.)1D.C. Court of Appeals strikes Deutsche Bank National Trust brief citing four AI-invented cases (court filing, Jun 22, 2026)Court filing · severity 2/5Sep 3, 2026Deutsche Bank (U.S.) · AI incidents →District of Columbia Court of Appeals ↗
20HSBC1Deepfake Zoom call leads a Singapore finance director to wire US$499,000 from an HSBC account; funds recovered (resolved, Mar 26, 2025)Resolved · severity 2/5Apr 7, 2025HSBC · AI incidents →The Straits Times ↗
21Hilltop1PlainsCapital Bank customer sues after an alleged AI voice clone redirected a $20,000 transfer (court filing, Nov 5, 2024)Court filing · severity 2/5Dec 11, 2024Hilltop · AI incidents →FOX 26 Houston ↗
22Standard Chartered1Standard Chartered warns Thai investors of fake ads using AI to impersonate its executives (confirmed by the institution, Feb 24, 2026)Confirmed by the institution · severity 1/5Feb 24, 2026Standard Chartered · AI incidents →Standard Chartered Thailand ↗
23BMO Financial Group1Instagram ads use AI deepfakes of BMO strategist Brian Belski to lure investors (reported, Jun 17, 2025)Reported · severity 1/5Jun 17, 2025BMO Financial Group · AI incidents →BleepingComputer ↗
24DBS1DBS warns deepfake videos of its leaders and staff are pushing investment scams (confirmed by the institution, May 20, 2025)Confirmed by the institution · severity 1/5May 20, 2025DBS · AI incidents →DBS Bank ↗
25Goldman1Deepfakes of Goldman strategists David Kostin and Abby Joseph Cohen used in Instagram stock-tip scams (confirmed by the institution, Apr 1, 2025)Confirmed by the institution · severity 1/5Apr 24, 2025Goldman · AI incidents →Fortune ↗

Each row quotes one record from AI incidents register; the “On this site” link opens the bank's own page or sub-page with every source. Banks absent from the table have nothing matching on the record this site holds.

How is this ranked?

Data: the AI incidents at banks register (/ai-incidents): dated, sourced records of AI failures, AI used against banks and governance findings, each with a status and severity.

Rule: Every register record naming the bank (its own AI, AI used against it or its customers, or a governance finding). Score = records; ties by the highest severity, then the newest record.

Counts: 25 of 141 profiled banks qualify; 31 distinct sources cited in the table. Data checked 2026-10-24; ranking template updated 2026-10-30.

What are the caveats?

A record is a publicly reported event with the status the sources support (reported, bank-confirmed, regulator finding, court filing, settled, resolved or disputed); it is not a finding of fault. Banks absent from the table have no record in the register, which is not evidence that nothing happened.

Banks absent from the table have nothing matching on the record this site holds, which is not evidence that they do nothing. Each row links the bank's own page, where every entry carries its sources.

Which bank ranks first?

JPMorgan Chase leads with 5 records: Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026). BofA is second with 5.

How many large banks have publicly reported AI incidents?

25 of the 141 profiled banks (120 US, 21 non-US groups). Among those listed, 14 are US banks and 11 non-US groups.

What counts, and what does not?

Every register record naming the bank (its own AI, AI used against it or its customers, or a governance finding). Score = records; ties by the highest severity, then the newest record. Source: the AI incidents at banks register (/ai-incidents): dated, sourced records of AI failures, AI used against banks and governance findings, each with a status and severity.

Is this a measure of capability?

No. Every row is a sourced fact on the public record: what the bank, a regulator, a filing or an independent outlet has put on the record. The page does not rate how well anything works.

When was this checked, and how often does it update?

The data behind the table was last checked on 2026-10-24 (AI incidents register). The page recomputes whenever that dataset changes and is republished with the site; it is never edited by hand.

When any of these banks moves on AI, you'll read it the next morning.

when one of the banks we cover moves on AI, it is in the next morning's brief · six sourced stories · 7 am PT · free

plus every regulation, bank and agent page update, the morning after · leave any morning