# Which large banks have had AI used against them or their customers? Source: https://www.bankingnewsai.com/banks/leaders/ai-used-against-banks Last updated: Oct 30, 2026 Checked 2026-10-24 · AI incidents register. Nothing on this page is written by a model: every row is computed from that dataset. On the public record as of Oct 24, 2026, 19 of the 141 large banks profiled appear in a register record where criminals used AI against the bank or its customers. Ranked by register records, the top 5 are BofA (3 records), Lloyds (3 records), Commonwealth Bank (2 records), JPMorgan (2 records) and Wells Fargo (2 records). BofA's strongest evidence: Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026). ## Which of the large banks have had AI used against them or their customers? | # | Bank | Register records | Latest record | Status | Date | On this site | Sources | | --- | --- | --- | --- | --- | --- | --- | --- | | 1 | [BofA](https://www.bankingnewsai.com/banks/bank-of-america) | 3 | Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026) | Reported · severity 2/5 | Oct 22, 2026 | [BofA · AI incidents](https://www.bankingnewsai.com/banks/bank-of-america/ai-incidents) | [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access); [ABC7 News (KGO-TV)](https://abc7news.com/post/bay-area-victim-duped-ai-generated-trump-golden-eagles-project-collectible-scam/15852376/) | | 2 | [Lloyds](https://www.bankingnewsai.com/banks/lloyds) | 3 | Lloyds refunds estate of 82-year-old customer lured by an AI Farage deepfake investment scam (confirmed by the institution, May 1, 2026) | Confirmed by the institution · severity 2/5 | Sep 25, 2026 | [Lloyds · AI incidents](https://www.bankingnewsai.com/banks/lloyds/ai-incidents) | [News & Star](https://www.newsandstar.co.uk/news/26519282.carlisle-mum-dies-losing-35k-ai-nigel-farage-scam/); [BBC News](https://www.bbc.co.uk/news/articles/c1lg3ded6j9o) | | 3 | [Commonwealth Bank](https://www.bankingnewsai.com/banks/commonwealth-bank) | 2 | Commonwealth Bank refers about A$1bn of suspect home loans, some reportedly AI-forged, to police (reported, Feb 26, 2026) | Reported · severity 3/5 | Feb 26, 2026 | [Commonwealth Bank · AI incidents](https://www.bankingnewsai.com/banks/commonwealth-bank/ai-incidents) | [Australian Financial Review](https://www.afr.com/companies/financial-services/cba-probes-1b-in-suspected-fraudulent-home-loans-calls-in-police-20260223-p5o4mc); [Commonwealth Bank of Australia](https://www.commbank.com.au/support/security/latest-scams-and-security-alerts/past-alerts.html) | | 4 | [JPMorgan](https://www.bankingnewsai.com/banks/jpmorgan-chase) | 2 | Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026) | Reported · severity 2/5 | Oct 22, 2026 | [JPMorgan · AI incidents](https://www.bankingnewsai.com/banks/jpmorgan-chase/ai-incidents) | [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access); [The Wall Street Journal (via Mint)](https://www.livemint.com/technology/tech-news/i-cloned-myself-with-ai-she-fooled-my-bank-and-my-family-11682676148985.html) | | 5 | [Wells Fargo](https://www.bankingnewsai.com/banks/wells-fargo) | 2 | Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026) | Reported · severity 2/5 | Oct 22, 2026 | [Wells Fargo · AI incidents](https://www.bankingnewsai.com/banks/wells-fargo/ai-incidents) | [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access); [VICE (Motherboard)](https://www.vice.com/en/article/deepfake-voice-do-not-pay-wells-fargo-refund/) | | 6 | [Banco Santander](https://www.bankingnewsai.com/banks/santander) | 2 | Deepfake ads clone Santander chair Ana Botín's voice to push fake investment platforms (reported, Jul 1, 2025) | Reported · severity 1/5 | Jul 31, 2025 | [Banco Santander · AI incidents](https://www.bankingnewsai.com/banks/santander/ai-incidents) | [Maldita.es](https://maldita.es/timo/20250731/videos-ia-famosos-inversiones); [BBC News](https://www.bbc.co.uk/news/articles/c1lg3ded6j9o) | | 7 | [TD Bank Group](https://www.bankingnewsai.com/banks/td-bank-group) | 1 | TD customer, 88, loses C$450,000 to a scam that began with a Mark Carney deepfake; bank won't reimburse him (reported, May 1, 2025) | Reported · severity 3/5 | Oct 19, 2026 | [TD Bank Group · AI incidents](https://www.bankingnewsai.com/banks/td-bank-group/ai-incidents) | [CBC News (Go Public)](https://www.cbc.ca/news/gopublic/bank-fraud-legislation-9.7382518) | | 8 | [Citi](https://www.bankingnewsai.com/banks/citigroup) | 1 | Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026) | Reported · severity 2/5 | Oct 22, 2026 | [Citi · AI incidents](https://www.bankingnewsai.com/banks/citigroup/ai-incidents) | [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) | | 9 | [Schwab](https://www.bankingnewsai.com/banks/charles-schwab) | 1 | Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026) | Reported · severity 2/5 | Oct 22, 2026 | [Schwab · AI incidents](https://www.bankingnewsai.com/banks/charles-schwab/ai-incidents) | [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) | | 10 | [Morgan Stanley](https://www.bankingnewsai.com/banks/morgan-stanley) | 1 | Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026) | Reported · severity 2/5 | Oct 22, 2026 | [Morgan Stanley · AI incidents](https://www.bankingnewsai.com/banks/morgan-stanley/ai-incidents) | [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) | | 11 | [HSBC](https://www.bankingnewsai.com/banks/hsbc) | 1 | Deepfake Zoom call leads a Singapore finance director to wire US$499,000 from an HSBC account; funds recovered (resolved, Mar 26, 2025) | Resolved · severity 2/5 | Apr 7, 2025 | [HSBC · AI incidents](https://www.bankingnewsai.com/banks/hsbc/ai-incidents) | [The Straits Times](https://www.straitstimes.com/singapore/finance-director-nearly-loses-670k-to-scammers-using-deepfakes-to-pose-as-company-senior-execs) | | 12 | [Hilltop](https://www.bankingnewsai.com/banks/hilltop) | 1 | PlainsCapital Bank customer sues after an alleged AI voice clone redirected a $20,000 transfer (court filing, Nov 5, 2024) | Court filing · severity 2/5 | Dec 11, 2024 | [Hilltop · AI incidents](https://www.bankingnewsai.com/banks/hilltop/ai-incidents) | [FOX 26 Houston](https://www.fox26houston.com/news/houston-man-out-20k-says-criminals-cloned-his-voice-ai-wire-transfer) | | 13 | [NatWest](https://www.bankingnewsai.com/banks/natwest) | 1 | Deepfake image of NatWest CEO Paul Thwaite spread on X as scam bait (confirmed by the institution, Jul 3, 2026) | Confirmed by the institution · severity 1/5 | Jul 3, 2026 | [NatWest · AI incidents](https://www.bankingnewsai.com/banks/natwest/ai-incidents) | [City AM](https://www.cityam.com/natwest-boss-becomes-latest-city-figure-caught-in-ai-social-media-scam/) | | 14 | [Barclays](https://www.bankingnewsai.com/banks/barclays) | 1 | AI-generated 'Monzo Slots' and 'Barclays Slots' casino ads impersonate UK banks on social media (confirmed by the institution, Jun 3, 2026) | Confirmed by the institution · severity 1/5 | Jun 3, 2026 | [Barclays · AI incidents](https://www.bankingnewsai.com/banks/barclays/ai-incidents) | [Cybernews](https://cybernews.com/cybercrime/fake-monzo-gambling-scam-tiktok/) | | 15 | [Standard Chartered](https://www.bankingnewsai.com/banks/standard-chartered) | 1 | Standard Chartered warns Thai investors of fake ads using AI to impersonate its executives (confirmed by the institution, Feb 24, 2026) | Confirmed by the institution · severity 1/5 | Feb 24, 2026 | [Standard Chartered · AI incidents](https://www.bankingnewsai.com/banks/standard-chartered/ai-incidents) | [Standard Chartered Thailand](https://www.sc.com/th-en/2026/02/24/standard-chartered-beware-of-fraudulent-investmentsolicitation/) | | 16 | [BMO Financial Group](https://www.bankingnewsai.com/banks/bmo-group) | 1 | Instagram ads use AI deepfakes of BMO strategist Brian Belski to lure investors (reported, Jun 17, 2025) | Reported · severity 1/5 | Jun 17, 2025 | [BMO Financial Group · AI incidents](https://www.bankingnewsai.com/banks/bmo-group/ai-incidents) | [BleepingComputer](https://www.bleepingcomputer.com/news/security/instagram-ads-mimicking-bmo-eq-bank-are-finance-scams/) | | 17 | [DBS](https://www.bankingnewsai.com/banks/dbs) | 1 | DBS warns deepfake videos of its leaders and staff are pushing investment scams (confirmed by the institution, May 20, 2025) | Confirmed by the institution · severity 1/5 | May 20, 2025 | [DBS · AI incidents](https://www.bankingnewsai.com/banks/dbs/ai-incidents) | [DBS Bank](https://www.dbs.com.sg/personal/scam-defence/recent-scams-fraud.page) | | 18 | [Goldman](https://www.bankingnewsai.com/banks/goldman-sachs) | 1 | Deepfakes of Goldman strategists David Kostin and Abby Joseph Cohen used in Instagram stock-tip scams (confirmed by the institution, Apr 1, 2025) | Confirmed by the institution · severity 1/5 | Apr 24, 2025 | [Goldman · AI incidents](https://www.bankingnewsai.com/banks/goldman-sachs/ai-incidents) | [Fortune](https://fortune.com/article/goldman-sachs-abby-joseph-cohen-david-kostin-ai-deep-fake-instagram/) | | 19 | [ING](https://www.bankingnewsai.com/banks/ing) | 1 | ING manager gets a fake voicemail from 'CEO Steven van Rijswijk' about a confidential project (confirmed by the institution, Jan 1, 2024) | Confirmed by the institution · severity 1/5 | Jun 18, 2025 | [ING · AI incidents](https://www.bankingnewsai.com/banks/ing/ai-incidents) | [ING](https://ing.com/news/2025/06/tech-platforms-must-do-more-to-stop-scams-daniele-tonella.html) | ## How is this ranked? Data: the AI incidents at banks register (/ai-incidents): dated, sourced records of AI failures, AI used against banks and governance findings, each with a status and severity. Rule: Records whose AI role is "AI weaponised". Score = records; ties by severity. Counts: 19 of 141 profiled banks qualify; 19 distinct sources cited in the table. Data checked 2026-10-24; ranking template updated 2026-10-30. ## What are the caveats? A record is a publicly reported event with the status the sources support (reported, bank-confirmed, regulator finding, court filing, settled, resolved or disputed); it is not a finding of fault. Banks absent from the table have no record in the register, which is not evidence that nothing happened. Banks absent from the table have nothing matching on the record this site holds, which is not evidence that they do nothing. Each row links the bank's own page, where every entry carries its sources. ## FAQ ### Which bank ranks first? Bank of America leads with 3 records: Unvetted AI agents found in US bank customer accounts; Morgan Stanley, JPMorgan, Citi and BofA restrict them (reported, Oct 1, 2026). Lloyds is second with 3. ### How many large banks had AI used against them or their customers? 19 of the 141 profiled banks (120 US, 21 non-US groups). Among those listed, 8 are US banks and 11 non-US groups. ### What counts, and what does not? Records whose AI role is "AI weaponised". Score = records; ties by severity. Source: the AI incidents at banks register (/ai-incidents): dated, sourced records of AI failures, AI used against banks and governance findings, each with a status and severity. ### Is this a measure of capability? No. Every row is a sourced fact on the public record: what the bank, a regulator, a filing or an independent outlet has put on the record. The page does not rate how well anything works. ### When was this checked, and how often does it update? The data behind the table was last checked on 2026-10-24 (AI incidents register). The page recomputes whenever that dataset changes and is republished with the site; it is never edited by hand. ## Related questions - [Which large banks have been targeted by deepfake, voice-clone or AI impersonation fraud?](https://www.bankingnewsai.com/banks/leaders/deepfake-and-voice-clone-fraud) - [Which large banks warn of AI-enabled cyber and fraud threats in their SEC filings?](https://www.bankingnewsai.com/banks/leaders/ai-cyber-and-fraud-threats-in-filings) - [Which large banks lead in AI for cybersecurity?](https://www.bankingnewsai.com/banks/leaders/cybersecurity) - [Which large banks have had publicly reported AI incidents?](https://www.bankingnewsai.com/banks/leaders/ai-incidents-reported) - [Which large banks face AI-related litigation, regulatory findings or bias findings?](https://www.bankingnewsai.com/banks/leaders/ai-governance-findings) - [Which large banks have had their own AI systems fail or be withdrawn?](https://www.bankingnewsai.com/banks/leaders/own-ai-failures) - [Which large banks have restricted or paused AI tools?](https://www.bankingnewsai.com/banks/leaders/restricted-or-paused-ai-tools) - [All ranked answers](https://www.bankingnewsai.com/banks/leaders) --- Canonical page: https://www.bankingnewsai.com/banks/leaders/ai-used-against-banks Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (45 authorities, 260 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.