SEC filings · computed from SEC EDGAR filings dataset; nothing on this page is written by a model. All ranked answers: /banks/leaders
On the public record as of Oct 31, 2026, 9 of the 141 large banks profiled mention deepfakes in a verbatim statement in an SEC filing. Ranked by quotes (filings), the top 5 are U.S. Bank (3 filing quotes), PNC (3 filing quotes), Amex (2 filing quotes), Seacoast Bank (2 filing quotes) and Simmons Bank (1 filing quote). U.S. Bank's strongest evidence: U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026).
141 banks profiled (120 US, 21 non-US) · 9 with matching evidence · ranked answer, not a comparison
Which of the large banks mention deepfakes in their SEC filings?
| # | Bank | Quotes (filings) | Latest statement (extractor's one-line claim) | Status | Date | On this site | Sources |
|---|---|---|---|---|---|---|---|
| 1 | U.S. Bank | 3 | U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026) | 3 filings | Feb 23, 2026 | U.S. Bank · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 2 | PNC | 3 | PNC warns that attackers are using generative AI and deepfakes, making cyber attacks increasingly sophisticated and harder to anticipate. (Form 10-K, risk factors, filed Feb 20, 2026) | 3 filings | Feb 20, 2026 | PNC · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 3 | Amex | 2 | Amex warns that cyberattacks it faces include AI-assisted deepfakes and attacks exploiting vulnerabilities in AI models. (Form 10-Q, MD&A, filed Oct 23, 2026) | 2 filings | Oct 23, 2026 | Amex · in their words → | SEC EDGAR ↗ · SEC EDGAR ↗ |
| 4 | Seacoast Bank | 2 | Seacoast warns criminals are using AI to steal identities and impersonate clients, making fraud harder to detect. (Form 10-K, risk factors, filed Feb 27, 2026) | 1 filing | Feb 27, 2026 | Seacoast Bank · in their words → | SEC EDGAR ↗ |
| 5 | Simmons Bank | 1 | Simmons says cyber-attacks increasingly use generative AI and deepfakes, making attacks harder to anticipate. (Form 10-Q, risk factors, filed May 6, 2026) | 1 filing | May 6, 2026 | Simmons Bank · in their words → | SEC EDGAR ↗ |
| 6 | Santander US | 1 | Santander warns threat actors could use generative AI for convincing phishing, deepfake fraud and faster, customized cyberattacks. (Form 10-K, risk factors, filed Mar 2, 2026) | 1 filing | Mar 2, 2026 | Santander US · in their words → | SEC EDGAR ↗ |
| 7 | Eastern Bank | 1 | Eastern says agentic AI has heightened fraud risk, letting bad actors create synthetic identities and deepfake documents more easily. (Form 10-K, risk factors, filed Mar 2, 2026) | 1 filing | Mar 2, 2026 | Eastern Bank · in their words → | SEC EDGAR ↗ |
| 8 | United Community | 1 | United Community says AI has enabled more sophisticated cyberattacks, including deepfake impersonation fraud, scaling up cyber threat activity. (Form 10-K, risk factors, filed Feb 17, 2026) | 1 filing | Feb 17, 2026 | United Community · in their words → | SEC EDGAR ↗ |
| 9 | Bread Financial | 1 | Bread Financial warns bad actors could use AI deepfakes of its leadership, damaging customer trust and reputation. (Form 10-K, risk factors, filed Feb 14, 2025) | 1 filing | Feb 14, 2025 | Bread Financial · in their words → | SEC EDGAR ↗ |
Each row quotes one record from SEC EDGAR filings dataset; the “On this site” link opens the bank's own page or sub-page with every source. Banks absent from the table have nothing matching on the record this site holds.
How is this ranked?
Data: the SEC filings dataset (data/sec/quotes.jsonl): verbatim AI statements from 10-K, 10-Q, 8-K and DEF 14A filings of the banks' holding companies, each with its EDGAR link, filing date, section and topic.
Rule: Quotes whose verbatim text contains "deepfake". Score = such quotes.
Counts: 9 of 141 profiled banks qualify; 12 distinct sources cited in the table. Data checked 2026-10-31; ranking template updated 2026-10-30.
What are the caveats?
The dataset holds the AI passages the extractor found in filings since January 2024; a bank with few quotes may say more in passages not captured. Quotes are verbatim; the one-line claim is the extractor's summary and links the EDGAR text.
Banks without a US SEC filer (most non-US groups, private and mutual banks) have no quotes and are absent.
Banks absent from the table have nothing matching on the record this site holds, which is not evidence that they do nothing. Each row links the bank's own page, where every entry carries its sources.
Which bank ranks first?
U.S. Bancorp leads with 3 filing quotes: U.S. Bank says AI has enabled attackers to automate attacks and create convincing deepfake social engineering, raising the likelihood of successful breaches. (Form 10-K, risk factors, filed Feb 23, 2026). PNC is second with 3.
How many large banks mention deepfakes in SEC filings?
9 of the 141 profiled banks (120 US, 21 non-US groups). Among those listed, 9 are US banks and 0 non-US groups.
What counts, and what does not?
Quotes whose verbatim text contains "deepfake". Score = such quotes. Source: the SEC filings dataset (data/sec/quotes.jsonl): verbatim AI statements from 10-K, 10-Q, 8-K and DEF 14A filings of the banks' holding companies, each with its EDGAR link, filing date, section and topic.
Is this a measure of capability?
No. Every row is a sourced fact on the public record: what the bank, a regulator, a filing or an independent outlet has put on the record. The page does not rate how well anything works.
When was this checked, and how often does it update?
The data behind the table was last checked on 2026-10-31 (SEC EDGAR filings dataset). The page recomputes whenever that dataset changes and is republished with the site; it is never edited by hand.
When any of these banks moves on AI, you'll read it the next morning.
when one of the banks we cover moves on AI, it is in the next morning's brief · six sourced stories · 7 am PT · free
plus every regulation, bank and agent page update, the morning after · leave any morning