Which large banks name AI as a risk factor in their 10-K?

Data checked Oct 31, 2026 · 94 of 141 banks qualify · 80 sources cited · template updated Oct 30, 2026

SEC filings · computed from SEC EDGAR filings dataset; nothing on this page is written by a model. All ranked answers: /banks/leaders

On the public record as of Oct 31, 2026, 94 of the 141 large banks profiled have at least one verbatim AI statement in the risk-factors section of a Form 10-K. Ranked by quotes (filings), the top 5 are U.S. Bank (16 filing quotes), Busey Bank (13 filing quotes), Citi (13 filing quotes), Capital One (13 filing quotes) and SouthState (12 filing quotes). U.S. Bank's strongest evidence: U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026).

141 banks profiled (120 US, 21 non-US) · 94 with matching evidence · top 40 shown · ranked answer, not a comparison

Which of the large banks name AI as a risk factor in their 10-K?

Checked 2026-10-31 · SEC EDGAR filings dataset
#BankQuotes (filings)Latest statement (extractor's one-line claim)StatusDateOn this siteSources
1U.S. Bank16U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026)3 filingsFeb 23, 2026U.S. Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
2Busey Bank13Busey warns that failing to adopt or govern generative AI could hurt customer retention, competitiveness and efficiency gains. (Form 10-K, risk factors, filed Feb 26, 2026)3 filingsFeb 26, 2026Busey Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
3Citi13Citi says it has used AI and machine learning for years and recently began broadly deploying Generative AI across its technology platforms and services. (Form 10-K, risk factors, filed Feb 20, 2026)3 filingsFeb 20, 2026Citi · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
4Capital One13Capital One says it relies on quantitative models and some AI for risk management, estimates, forecasts and capital compliance. (Form 10-K, risk factors, filed Feb 19, 2026)3 filingsFeb 19, 2026Capital One · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
5SouthState12SouthState says its internal AI use, including generative AI and machine learning, has increased efficiency and will continue expanding in line with its AI Strategy. (Form 10-K, risk factors, filed Feb 20, 2026)3 filingsFeb 20, 2026SouthState · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
6Valley11Valley says significant risks come with using AI and it cannot assure AI will enhance products or produce intended results. (Form 10-K, risk factors, filed Feb 27, 2026)3 filingsFeb 27, 2026Valley · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
7HSBC USA11HSBC USA says new technologies including AI could force it to spend more to adapt products to retain customers. (Form 10-K, risk factors, filed Feb 25, 2026)3 filingsFeb 25, 2026HSBC USA · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
8Glacier11Glacier says rapidly evolving AI presents ethical and legal challenges and may diminish brand trust and cause reputational harm. (Form 10-K, risk factors, filed Feb 25, 2026)3 filingsFeb 25, 2026Glacier · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
9Wells Fargo11Wells Fargo says it uses AI to improve efficiency, automate decisions, enhance models and data management, and improve customer service. (Form 10-K, risk factors, filed Feb 24, 2026)3 filingsFeb 24, 2026Wells Fargo · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
10Santander US10Santander says it uses AI and explores more uses, while warning third-party AI could cause false information, inefficiencies, liability and reputational harm. (Form 10-K, risk factors, filed Mar 2, 2026)3 filingsMar 2, 2026Santander US · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
11Webster10Webster says bad actors using AI to commit fraud and cyber-attacks is a risk that could hinder its prevention and detection efforts. (Form 10-K, risk factors, filed Feb 27, 2026)3 filingsFeb 27, 2026Webster · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
12Rockland Trust10Independent Bank says its development and use of AI presents risks and challenges that may adversely affect its business. (Form 10-K, risk factors, filed Feb 27, 2026)3 filingsFeb 27, 2026Rockland Trust · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
13First Hawaiian10First Hawaiian says it and its vendors or counterparties have developed or incorporated AI into business processes, services or products, creating risks and challenges. (Form 10-K, risk factors, filed Feb 27, 2026)3 filingsFeb 27, 2026First Hawaiian · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
14Seacoast Bank10Seacoast warns criminals are using AI to steal identities and impersonate clients, making fraud harder to detect. (Form 10-K, risk factors, filed Feb 27, 2026)3 filingsFeb 27, 2026Seacoast Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
15Zions10Zions says it is in the early stages of integrating AI to boost productivity and efficiency, without fully autonomous AI in critical decisions or client-facing… (Form 10-K, risk factors, filed Feb 24, 2026)3 filingsFeb 24, 2026Zions · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
16PNC10PNC warns that attackers are using generative AI and deepfakes, making cyber attacks increasingly sophisticated and harder to anticipate. (Form 10-K, risk factors, filed Feb 20, 2026)3 filingsFeb 20, 2026PNC · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
17State Street10State Street warns that incorporating AI, agentic AI and related emerging technologies introduces risks such as cryptographic vulnerabilities and security framework… (Form 10-K, risk factors, filed Feb 19, 2026)3 filingsFeb 19, 2026State Street · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
18Sallie Mae10SLM warns it could lose market share if it cannot keep pace with rapid technology changes, including AI. (Form 10-K, risk factors, filed Feb 19, 2026)3 filingsFeb 19, 2026Sallie Mae · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
19Stifel Bank10Stifel says it uses, develops and incorporates AI, machine learning and generative AI into its technology platform and services. (Form 10-K, risk factors, filed Feb 24, 2026)2 filingsFeb 24, 2026Stifel Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
20Customers Bank9Customers Bank says hackers' use of AI has heightened the risk of circumvention of its security measures. (Form 10-K, risk factors, filed Feb 27, 2026)3 filingsFeb 27, 2026Customers Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
21First Horizon9First Horizon says it is accelerating its data capabilities and responsible use of AI to deliver client and associate outcomes. (Form 10-K, risk factors, filed Feb 26, 2026)3 filingsFeb 26, 2026First Horizon · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
22BofA9Bank of America says it uses AI across operations, business processes, services and products and expects increasing use of it. (Form 10-K, risk factors, filed Feb 25, 2026)3 filingsFeb 25, 2026BofA · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
23Regions9Regions says it and its vendors deploy AI in business processes, services and products, creating growing risks. (Form 10-K, risk factors, filed Feb 24, 2026)3 filingsFeb 24, 2026Regions · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
24Bread Financial9Bread Financial says evolving AI laws could require changes to its AI use and raise compliance costs. (Form 10-K, risk factors, filed Feb 13, 2026)3 filingsFeb 13, 2026Bread Financial · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
25Banner Bank9Banner says its current and future AI uses and other emerging technologies may create additional risks. (Form 10-K, risk factors, filed Feb 25, 2026)2 filingsFeb 25, 2026Banner Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
26Axos Bank8Axos says bad actors' use of AI exposes it to fraud, fund misappropriation, and cyberattack risks. (Form 10-K, risk factors, filed Aug 20, 2026)3 filingsAug 20, 2026Axos Bank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
27FirstBank8FB Financial says its use of AI is limited and it does not rely on AI for core banking activities like credit decisions or pricing. (Form 10-K, risk factors, filed Feb 26, 2026)3 filingsFeb 26, 2026FirstBank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
28BNY8BNY says it has devoted significant resources to building AI solutions into daily operations and client technology initiatives. (Form 10-K, risk factors, filed Feb 25, 2026)3 filingsFeb 25, 2026BNY · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
29Ally8Ally warns that failing to keep pace with AI could leave it behind peers and that it may struggle to recruit talent or integrate AI. (Form 10-K, risk factors, filed Feb 25, 2026)3 filingsFeb 25, 2026Ally · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
30Truist8Truist uses AI across marketing, products, client service, software development, and fraud identification to compete. (Form 10-K, risk factors, filed Feb 24, 2026)3 filingsFeb 24, 2026Truist · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
31KeyBank8KeyCorp says it uses AI, including through third-party vendors, and will increasingly use it across its business and operations. (Form 10-K, risk factors, filed Feb 23, 2026)3 filingsFeb 23, 2026KeyBank · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
32Western Alliance8Western Alliance says growing use of AI technologies may further increase its cyber and operational threat exposure. (Form 10-K, risk factors, filed Feb 23, 2026)3 filingsFeb 23, 2026Western Alliance · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
33United Community8United Community says rapid technological change, including AI and machine learning, is reshaping financial services and affecting its future success. (Form 10-K, risk factors, filed Feb 17, 2026)3 filingsFeb 17, 2026United Community · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
34Renasant8Renasant says its development and use of AI, including generative and agentic AI, presents risks that may materially and adversely affect its business. (Form 10-K, risk factors, filed Mar 2, 2026)2 filingsMar 2, 2026Renasant · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
35Banc of California8Banc of California says its use of AI and emerging technologies could cause service disruptions, processing errors, compliance failures, or operational risk if poorly… (Form 10-K, risk factors, filed Feb 27, 2026)2 filingsFeb 27, 2026Banc of California · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
36Ameris8Ameris says widespread adoption of AI and other emerging technologies could intensify competition and accelerate disruption in financial services. (Form 10-K, risk factors, filed Feb 26, 2026)2 filingsFeb 26, 2026Ameris · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
37Fifth Third8Fifth Third warns that AI use by attackers makes cyber-attacks harder to detect and increases their risk. (Form 10-K, risk factors, filed Feb 24, 2026)2 filingsFeb 24, 2026Fifth Third · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
38Goldman7Goldman warns that bad actors using generative AI for fraud or cyber attacks could cause losses and outflows for it and its clients. (Form 10-K, risk factors, filed Feb 25, 2026)3 filingsFeb 25, 2026Goldman · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
39Morgan Stanley7Morgan Stanley warns its risk management strategies and models may not keep pace with new technologies such as AI. (Form 10-K, risk factors, filed Feb 19, 2026)3 filingsFeb 19, 2026Morgan Stanley · in their words →SEC EDGAR ↗ · SEC EDGAR ↗
40Associated7Associated says failure to comply with evolving AI regulation could adversely affect its business, results and financial condition. (Form 10-K, risk factors, filed Feb 12, 2026)3 filingsFeb 12, 2026Associated · in their words →SEC EDGAR ↗ · SEC EDGAR ↗

Each row quotes one record from SEC EDGAR filings dataset; the “On this site” link opens the bank's own page or sub-page with every source. Banks absent from the table have nothing matching on the record this site holds.

How is this ranked?

Data: the SEC filings dataset (data/sec/quotes.jsonl): verbatim AI statements from 10-K, 10-Q, 8-K and DEF 14A filings of the banks' holding companies, each with its EDGAR link, filing date, section and topic.

Rule: Quotes from the risk-factors section of Form 10-K filings. Score = such quotes; ties by distinct filings, then the newest filing.

Counts: 94 of 141 profiled banks qualify; the table shows the top 40; 80 distinct sources cited in the table. Data checked 2026-10-31; ranking template updated 2026-10-30.

What are the caveats?

The dataset holds the AI passages the extractor found in filings since January 2024; a bank with few quotes may say more in passages not captured. Quotes are verbatim; the one-line claim is the extractor's summary and links the EDGAR text.

Banks without a US SEC filer (most non-US groups, private and mutual banks) have no quotes and are absent.

Banks absent from the table have nothing matching on the record this site holds, which is not evidence that they do nothing. Each row links the bank's own page, where every entry carries its sources.

Which bank ranks first?

U.S. Bancorp leads with 16 filing quotes: U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026). Busey Bank is second with 13.

How many large banks name AI as a 10-K risk factor?

94 of the 141 profiled banks (120 US, 21 non-US groups); the table shows the top 40. Among those listed, 40 are US banks and 0 non-US groups.

What counts, and what does not?

Quotes from the risk-factors section of Form 10-K filings. Score = such quotes; ties by distinct filings, then the newest filing. Source: the SEC filings dataset (data/sec/quotes.jsonl): verbatim AI statements from 10-K, 10-Q, 8-K and DEF 14A filings of the banks' holding companies, each with its EDGAR link, filing date, section and topic.

Is this a measure of capability?

No. Every row is a sourced fact on the public record: what the bank, a regulator, a filing or an independent outlet has put on the record. The page does not rate how well anything works.

When was this checked, and how often does it update?

The data behind the table was last checked on 2026-10-31 (SEC EDGAR filings dataset). The page recomputes whenever that dataset changes and is republished with the site; it is never edited by hand.

When any of these banks moves on AI, you'll read it the next morning.

when one of the banks we cover moves on AI, it is in the next morning's brief · six sourced stories · 7 am PT · free

plus every regulation, bank and agent page update, the morning after · leave any morning