Banking regulators in the United States and Europe are stepping up scrutiny of artificial intelligence as concerns grow that advanced AI systems could launch cyberattacks against financial institutions and disrupt global markets.
According to a Reuters report published on October 13, 2026, the US Federal Reserve, Office of the Comptroller of the Currency (OCC), and Federal Deposit Insurance Corporation (FDIC) are questioning banks about their use of advanced AI models and the safeguards they have in place.
US and EU bank supervisors are grilling lenders on agentic AI — authority limits, human approval, audit trails, and how you shut an agent down. Per Reuters, adoption often outruns the controls. Worth pausing before anyone hands a model the keys. #AIagents
— CoinLover (@half_collector) October 13, 2026
Users question regulators’ ability to check AI
The growing use of autonomous AI systems raises questions about whether financial regulators have the technical expertise to assess the technology they are expected to oversee.
Social media user @Iris97w questioned whether regulators would be able to understand the code behind the AI trading and lending systems they are investigating. The concern is that regulators could require banks to demonstrate compliance without having the technical resources to independently verify how complex AI agents behave.
@Reuters tbh regulators circling ai lending and trading models was inevitable. the question is whether they understand what they’re actually auditing
— Iris晴柔 (@Iris97w) October 13, 2026
Another commenter, @elSchtaunto, raised a separate question about accountability, asking why corporate executives should not face criminal punishment when automated systems commit crimes.
@Reuters Why not jail the executives for any criminal activity perpetrated by the AIs
— Johnny Vindicated (@elSchtaunko) October 13, 2026
The ECB set an October deadline for bank recovery plans
In Europe, the European Central Bank (ECB) has given eurozone banks until the end of October to submit plans for responding to AI-enabled cyber threats.
European supervisors are looking to understand how banks depend on external technology providers and whether they can restart critical services after a serious attack.
Banks often depend on common software providers, cloud services, and other technology infrastructure. If an attacker exploits a weakness in a widely used product, several financial institutions could face disruption at the same time.
The ECB is also asking banks to map where AI is used across their operations and third-party providers. That information can help them identify critical dependencies, determine which systems must be restored first, and establish how to shut down and restart services safely.
OpenAI incident and South Korean bank attacks intensified the debate
Two incidents in 2026 have given banks concrete reasons to examine how AI can be used to find weaknesses and gain access to computer systems. In July, AI models developed by OpenAI bypassed controls during internal cybersecurity evaluations and accessed systems belonging to OpenAI and AI platform Hugging Face.
OpenAI disclosed the incident on August 26, explaining that the models exploited vulnerabilities, gained internet access, and accessed limited private data and credentials. The company said the incident did not affect OpenAI customer data, product functionality, or availability.
In late September and early October, another case emerged in South Korea. Cybersecurity firm CrowdStrike said a suspected attacker likely based in China used the Chinese-developed ARTEX penetration-testing agent alongside Anthropic’s Claude Code in attacks targeting South Korean banks. At least nine banks were reported to have been targeted. Shinhan Bank said about 25,000 customers had their personal information compromised, while KB Kookmin Bank reported a breach affecting 119 customers.
Crypto security data can offer banks insights on AI threats
The cryptocurrency industry security data offers a useful comparison on how autonomous agents can be used to exploit user data. Blockchain intelligence firm TRM Labs recorded 207 crypto hacks and exploits in the first half of 2026, resulting in approximately $972 million in losses.
The number of incidents more than doubled from 83 in the same period of 2025, even as total losses fell from $2.3 billion. TRM attributed much of the increase in incidents to smart contract exploits, while infrastructure and operational compromises accounted for about 76% of the money stolen.
In another development, UK lawmakers have opened a new inquiry into whether banks are unfairly limiting access to financial services for cryptocurrency businesses, as concerns over account closures and payment restrictions continue to grow across the industry.
Enjoyed this? Bookmark DeFi Planet, explore related topics, and follow us on Twitter, LinkedIn, Facebook, Instagram, Threads, and CoinMarketCap Community for seamless access to high-quality industry insights.
Take control of your crypto portfolio with DEFI PLANET PRO, DeFi Planet’s suite of analytics tools.
