Cloudbank — AML single supervisor goes live 1 Jul +20 more · 20 Jun
Saturday, 20 June 2026 · 21 stories
Showing 21 of 21 stories
Watchlist — key dates ahead
18 Aug 2026Judo Bank releases FY26 full-year results, first look at scale of its Q4 bad-debt provisioning (AU).
1 Sep 2026Australia's Scams Prevention Framework's core obligations for banks, telcos and platforms take effect, backed by up to A$50m per-breach penalties and a private right of action.
2 Sep 2026RBNZ's next Monetary Policy Statement and OCR review.
11 Sep 2026RBNZ submissions close on Deposit Takers Act crisis-preparedness package and tranche-3 exposure-draft standards (recovery/exit planning, loss-absorbing capacity, Continuity of Access to Deposits).
Late Sep 2026RBNZ expected to release findings from the Keeping Cash Local consultation.
30 Sep 2026Heartland shareholders vote on the $620m TSB Bank acquisition and merger, after Toi Foundation trustees decide on the sale (expected August).
1 Oct 2026RBA's ban on card surcharges (Visa, Mastercard, eftpos and Amex) takes effect in Australia, estimated to save consumers and businesses up to A$1.8bn a year.
16 Oct 2026Submissions close on RBNZ's proposed prudential levy consultation on banks, insurers and FMIs; levy to take effect August 2027.
DIA becomes the sole AML/CFT supervisor for all reporting entities, replacing the RBNZ/FMA/DIA split, and gains stronger powers including onsite inspections and compelled interviews, part-funded by a new industry levy. A companion package relaxes some requirements on a risk-proportionate basis — lighter trust CDD and address verification, fewer duplicative reports — with a third "Omnibus" bill expected to follow.
The US GENIUS Act's final rules are targeted for July, and EU MiCA issuers must be authorised by 1 July or risk delisting. Banks are being lined up as reserve custodians, while Mastercard's ~US$1.8bn BVNK deal and JPMorgan's multi-billion-dollar daily tokenised settlement show the rails moving mainstream.
The FMA has flagged 190+ fake trading-platform sites since March and ~110 scam ads in a single day on Meta, with deepfaked politicians and bank executives; ASIC took down ~12,000 scam sites in 2025 (up 90%). Mastercard research suggests ~29% of New Zealanders have been targeted by deepfake scams, with voice-cloning a top BNZ concern.
1 Regulatory — NZ horizon & global signals
New Zealand first; global banking, finance & payments items included where there's an NZ read-across.
Regulatory — NZ horizon & global signalscritical
AML/CFT moves to a single supervisor (DIA) from 1 July 2026
Financial crime · Law passed 18 May 2026, effective 1 July 2026
DIA becomes the sole AML/CFT supervisor for all reporting entities, replacing the RBNZ/FMA/DIA split, and gains stronger powers including onsite inspections and compelled interviews, part-funded by a new industry levy. A companion package relaxes some requirements on a risk-proportionate basis — lighter trust CDD and address verification, fewer duplicative reports — with a third "Omnibus" bill expected to follow.
Why it matters — Re-point onboarding/KYC controls and reporting to DIA, and use the relaxed rules to strip duplicative checks from onboarding while preparing documentation for a tougher, inspection-led supervisor.
Global stablecoin rules shift from legislation to enforcement
Digital assets / Payments · Deadlines land July 2026
The US GENIUS Act's final rules are targeted for July, and EU MiCA issuers must be authorised by 1 July or risk delisting. Banks are being lined up as reserve custodians, while Mastercard's ~US$1.8bn BVNK deal and JPMorgan's multi-billion-dollar daily tokenised settlement show the rails moving mainstream.
Why it matters — NZ has no domestic stablecoin regime yet, but regulated USD/EUR coins reaching the payment mainstream affect cross-border settlement and FX in banks' International/Trade operations, and feed RBNZ's Digital Cash and payments-modernisation thinking.
RBNZ eases bank capital; crisis-preparedness consultation opens
Prudential capital · Decision Dec 2025, consultations June 2026
Common equity requirements were eased by ~NZ$5bn system-wide, phasing in 2026–2029 (6% CET1 minimum by 2028). June consultations cover Tier 2 capital, loss-absorbing capacity and the Deposit Takers Act standards; the 2026 solvency stress test is run jointly with APRA.
Focused on banking & payments, but includes cross-industry moves with read-across to financial institutions and their operations.
AI & automation — banking, payments & beyondhigh
JPMorgan moves agentic KYC onboarding into production
Banking · Onboarding & KYC · Targeted ~end April 2026
An "agentic-first" system compresses onboarding from up to five days to under a minute by having agents orchestrate the whole workflow. The emerging pattern: RPA handles predictable steps while agents take the judgment-heavy parts, with risk-tiered straight-through processing for low-risk customers and review queues for the rest.
Why it matters — Reimagine the end-to-end onboarding journey around agents and risk-tiered straight-through processing, rather than automating individual steps of today's process.
Walmart to train all 2.1m staff on agentic AI; consolidates to four "super agents"
Retail / Operating model · April 2026
Beyond banking: Walmart is equipping its entire 2.1-million workforce with AI skills ("people-led, tech-powered") and has collapsed dozens of tools into four orchestrating "super agents", using Anthropic's MCP standard so agents interoperate across systems and older agents are retro-fitted to the same protocol.
Why it matters — Two lessons for bank AI programmes — build capability across the whole team rather than a central few, and consolidate point tools under an orchestration layer (and a shared standard) before agent sprawl sets in.
AI & automation — banking, payments & beyondmedium
KYC automation benchmarks: high adoption, low true automation
Banking ops benchmarks · Q1–Q2 2026
AI is now used somewhere in KYC at ~82% of firms (up from 42% a year earlier), yet only ~4% have automated the majority of checks; automation cuts processing time ~78% and compliance cost 40–60%, and ~70% of firms report losing clients to slow onboarding — useful external benchmarks for any automation business case.
NZ is the only OECD country without a real-time payments rail
Infrastructure · RBNZ paper, May 2026
RBNZ flags rising reliance on Visa/Mastercard and declining EFTPOS support as a resilience and cost risk, and is exploring a UPI-style model with India's NPCI alongside its Digital Cash work, under the Council of Financial Regulators' Payments Vision.
Why it matters — An account-to-account rail would reshape product fulfilment, payments ops and scheme costs — banks should position their operating models early.
Regulated open banking live; Kiwibank payment APIs go live in June
Open banking · Live since 1 Dec 2025
Under the Customer and Product Data Act, ANZ, ASB, BNZ and Westpac are designated on v2.3.3 standards; Kiwibank's payment services follow in June 2026 and other services in December, with third-party aggregators scaling accredited access.
Why it matters — The designated banks (ANZ, ASB, BNZ, Westpac) carry API availability and performance as operational KPIs; payment initiation also unlocks faster lending decisions and smoother account opening.
Design & cost-benefit work continues through 2026; earliest availability ~2030; banks would be distributors. Long horizon, watch only.
4 Banking & finance — macro
Banking & finance — macromedium
OCR held at 2.25%
Easing cycle looks near its end; next move may be a hike toward 2027. Watch mortgage pricing and refixing flows.
Banking & finance — macromedium
Q1 2026 GDP ~0.9%
Genuine recovery from 0.2%; supports credit demand and pipeline planning.
5 Competitor watch — NZ, Australia & global
Existing and emerging players across NZ and Australia, plus global names where they're relevant to NZ/AU banking.
Competitor watch — NZ, Australia & globalhigh
Westpac Group accelerates agentic AI & the UNITE program
Agentic "quasi-employees" with Accenture, conversational AI (Kasisto), a real-time scam shield, and conditional loan approvals reportedly cut to under 10 minutes from days — led by a new Chief Data, Digital & AI Officer hired from CBA.
Why it matters — A benchmark for NZ banks' AI roadmaps — the sub-10-minute approvals map straight to Lending Ops, and the agentic back-office model is worth studying.
Revolut commits NZ$120m to its NZ push; Wise entrenched in FX
Revolut plans to invest NZ$120m over five years to grow in NZ — starting transactional, expanding from there (50m+ users globally, now profitable). Wise stays entrenched in low-cost multi-currency transfers, and Australian neobanks like Judo and Up keep chipping at the majors.
Why it matters — These target NZ banks' International/Trade & FX margins and onboarding-led acquisition — fee-sensitive, digitally-native customers and SME FX are the exposure to watch.
CBA cut a further ~120 roles in April, having reversed earlier cuts after Finance Sector Union pressure — a pointed change-management lesson on AI-linked workforce moves, echoed by global majors restructuring around AI.
The government-backed challenger keeps investing in digital; its open-banking payment APIs go live this month, sharpening its 'maverick' positioning.
6 Fraud & scams
Customer-impacting fraud, scam typologies and the liability landscape — NZ-first, with global threat signals.
Fraud & scamshigh
NZ banks' scam reimbursement commitments now in force
Customer protection / Liability · Code commitments live since 30 Nov 2025
Under amended NZBA Code of Banking Practice commitments, major banks must warn and protect customers before suspicious payments, and may reimburse authorised-payment scam losses (broadly up to NZ$500,000 per case in defined circumstances) where they or the receiving bank fail their commitments — with the amount depending on the customer taking reasonable care.
Why it matters — This shifts scam economics onto operations — warning journeys, Confirmation of Payee, dispute handling and reimbursement assessment all sit in banks' customer-service and fraud-ops functions. The evidence trail and decisioning need to be right.
The FMA has flagged 190+ fake trading-platform sites since March and ~110 scam ads in a single day on Meta, with deepfaked politicians and bank executives; ASIC took down ~12,000 scam sites in 2025 (up 90%). Mastercard research suggests ~29% of New Zealanders have been targeted by deepfake scams, with voice-cloning a top BNZ concern.
Agentic AI set to "industrialise" scams — and synthetic identity
Threat horizon · BCG analysis, June 2026
BCG estimates agentic systems could cut the cost of running scams by 90%+, enabling a two-fold or greater rise in successful fraud; synthetic identities that fuse AI headshots with stolen credentials increasingly pass onboarding at banks and fintechs.
Why it matters — Synthetic identity hits onboarding/KYC controls directly — biometric liveness and behavioural analytics move from nice-to-have to baseline as the threat industrialises.
Majors including ING and Standard Chartered are piloting quantum-resistant cryptography, and UK/EU supervisors increasingly expect forward-looking planning. The near-term risk is "harvest now, decrypt later" — data exfiltrated today and decrypted once quantum matures.
Why it matters — Long-lived customer and KYC data is the exposure — banks should start crypto-agility and data-retention planning now even though NZ has no mandate yet.
With the EU's DORA in force and the ECB deepening scrutiny of concentration in critical service providers, operational-resilience expectations are rising globally; Australia's CPS 230 regime flows through to trans-Tasman groups.
Why it matters — Concentration in cloud, core platforms and shared group services is an operational-risk exposure across banking operations — map critical third parties and recovery paths before supervisors ask.
AI governance & model risk move up the supervisory agenda
Governance trend · 2026
As agentic AI spreads, supervisors are sharpening focus on accountability, transparency and frontier-AI risk; the EU AI Act treats credit-scoring and creditworthiness assessment as high-risk, with extraterritorial reach for firms using AI outputs in EU operations.
Why it matters — Bake governance into AI programmes from the start — model inventories, human-in-the-loop on credit decisions and clear accountability will be expected as agents enter lending and onboarding.