Cloudbank Digest — NZIER Shadow Board split on knife-edge OCR call +20 more · 07 Jul
Tuesday, 7 July 2026 · 21 stories
Showing 21 of 21 stories
Watchlist — key dates ahead
18 Aug 2026Judo Bank releases FY26 full-year results, first look at scale of its Q4 bad-debt provisioning (AU).
1 Sep 2026Australia's Scams Prevention Framework's core obligations for banks, telcos and platforms take effect, backed by up to A$50m per-breach penalties and a private right of action.
2 Sep 2026RBNZ's next Monetary Policy Statement and OCR review.
11 Sep 2026RBNZ submissions close on Deposit Takers Act crisis-preparedness package and tranche-3 exposure-draft standards (recovery/exit planning, loss-absorbing capacity, Continuity of Access to Deposits).
Late Sep 2026RBNZ expected to release findings from the Keeping Cash Local consultation.
30 Sep 2026Heartland shareholders vote on the $620m TSB Bank acquisition and merger, after Toi Foundation trustees decide on the sale (expected August).
1 Oct 2026RBA's ban on card surcharges (Visa, Mastercard, eftpos and Amex) takes effect in Australia, estimated to save consumers and businesses up to A$1.8bn a year.
16 Oct 2026Submissions close on RBNZ's proposed prudential levy consultation on banks, insurers and FMIs; levy to take effect August 2027.
NZIER's Monetary Policy Shadow Board split 5-4 in favour of holding the OCR at 2.25% at Wednesday's review, while bank economists remain divided on the live decision itself: ANZ, BNZ and UBS are picking a 25bp hike to 2.5%, while Westpac, Kiwibank and ASB expect a hold, citing the recent oil-price fall.
Australia's Scams Prevention Framework Act took effect this month, imposing six overarching duties (govern, prevent, detect, disrupt, respond, report) on banks, telcos and digital platforms, backed by civil penalties of up to AU$50 million per contravention. AFCA's jurisdiction was separately expanded from March 2026 to cover complaints against receiving banks, not just the victim's own bank. Consumer advocates have criticised the rollout's roughly nine-month delay from the original mid-2025 target as having cost Australians billions in unprotected losses.
The UK Financial Conduct Authority published the Mills Review, the first review of its kind by any global regulator, finding that roughly a fifth of UK adults (about 11 million people) are likely to use autonomous AI agents acting within pre-set financial goals by 2030. It sets out seven recommendations, including adapting the regulatory perimeter and building an AI-enabled supervisory model.
1 Regulatory — NZ horizon & global signals
New Zealand first; global banking, finance & payments items included where there's an NZ read-across.
Regulatory — NZ horizon & global signalshigh
ANZ New Zealand found in material breach of RBNZ outsourcing policy
Prudential supervision / operational resilience · Breach dated from June 2022, disclosed on RBNZ register and reported 4 July 2026
RBNZ has recorded ANZ New Zealand as in material breach of condition 11 of its banking registration, the BS11 outsourcing policy, after finding its back-up arrangements would not have let the bank operate independently if separated from its Australian parent, plus broader oversight and process gaps. ANZ says the back-up issue is fixed and it is running a remediation programme for the rest.
Why it matters — It is the only open material bank breach on RBNZ's register and lands just two years after the big four spent hundreds of millions of dollars satisfying RBNZ they had met BS11, underscoring that outsourcing and operational-separability risk remains a live supervisory priority even for well-resourced banks.
FATF launches 2026-2028 Roadmap on Combating Fraud under new UK presidency
Fraud and scam typologies · Launched 1 July 2026, action plan due by October 2026
FATF, under its new UK presidency, has launched a three-year roadmap targeting fraud and scam networks estimated at roughly $500 billion in global losses over 2024-2025, starting with a focus on scam-compound typologies and data requests to banks and regulators feeding into recommendations expected by early 2027.
Why it matters — The roadmap will likely shape future FATF guidance that DIA, FMA and RBNZ reference in supervising bank scam controls, reinforcing the direction already set by NZBA's Code of Banking Practice reimbursement commitments.
Australia's AML/CTF Tranche 2 reforms take effect, capturing lawyers, accountants and real estate agents
AML/CFT scope expansion · Effective 1 July 2026; newly regulated firms must enrol with AUSTRAC by 29 July 2026
Around 80,000 additional Australian businesses, including lawyers, accountants, real estate agents and precious metals dealers, must now enrol with AUSTRAC and comply with customer due diligence and suspicious-matter reporting duties under the AML/CTF Amendment Bill 2024.
Why it matters — The reform brings Australia's AML perimeter closer to New Zealand's own longstanding Phase 2 coverage of these sectors, relevant for trans-Tasman banks and reporting entities managing consistent AML programmes across both jurisdictions just as DIA consolidates as New Zealand's sole AML/CFT supervisor.
Focused on banking & payments, but includes cross-industry moves with read-across to financial institutions and their operations.
AI & automation — banking, payments & beyondcritical
FCA publishes landmark Mills Review on AI's long-term impact on retail financial services
AI regulation of retail financial services · 6 July 2026; final report due October 2026
The UK Financial Conduct Authority published the Mills Review, the first review of its kind by any global regulator, finding that roughly a fifth of UK adults (about 11 million people) are likely to use autonomous AI agents acting within pre-set financial goals by 2030. It sets out seven recommendations, including adapting the regulatory perimeter and building an AI-enabled supervisory model.
Why it matters — As the first ground-up regulatory rethink of agentic AI in consumer finance, the Mills Review's recommendations on perimeter, supervision and agent identity are likely to become a template other regulators, including in Australasia, reference when framing their own agentic AI rules.
Singapore's MAS and banks publish SAFR framework for safeguarding AI agents in finance
Agentic AI safeguards and governance · 3 July 2026
The Monetary Authority of Singapore, working with banks and fintechs under its BuildFin.ai initiative, released a white paper called Safeguards for Agentic Finance at Runtime (SAFR), proposing industry-wide standards for how AI agent actions are authorised, how human oversight is triggered, and what gets logged at each decision point.
Why it matters — SAFR gives banks a concrete, near-term blueprint for agent authorisation, auditability and interoperability controls, filling exactly the governance gap regulators elsewhere have flagged but not yet operationalised.
Bank of England floats 'kill switch' for agentic AI trading amid financial stability warning
Systemic risk from agentic AI · 30 June-1 July 2026
Bank of England Deputy Governor Sarah Breeden told the ECB's Sintra forum that autonomous AI agents could herd into identical trading decisions and amplify market volatility, floating circuit-breaker-style 'kill switches' to halt AI-driven trading market-wide; she said human-in-the-loop oversight of every agent action is no longer realistic. IMF financial counsellor Tobias Adrian separately flagged the 'black box' explainability problem of agentic loan decisions for supervisors.
Why it matters — A central bank openly discussing market-wide AI kill switches signals systemic-risk oversight of agentic AI is moving from theory to policy design, raising the bar for what banks will need to demonstrate about agent explainability and containment.
AI & automation — banking, payments & beyondmedium
NAB research finds one in five Australian SMEs already seeing 'transformational' AI gains
SME AI adoption and workforce readiness · circa 1 July 2026
New National Australia Bank research found 40% of Australian SMEs are actively using AI and 13% more plan to, with 22% of adopters reporting transformational benefits in productivity, marketing and customer service; respondents rated their workforce's AI readiness at just 3.8 out of 10.
Why it matters — The gap between SME AI adoption and workforce readiness is a direct signal for business bankers and lenders on where advisory, financing and cyber/fraud risk conversations with SME customers need to focus next.
AI & automation — banking, payments & beyondmediumUpdate
[UPDATE] Finance and tech sectors shedding 28,000 jobs a month as AI-attributed layoffs pass 100,000 for the year
AI-driven workforce reduction in finance · Data through June 2026, reported 2-6 July 2026
New Challenger, Gray & Christmas data shows AI has been cited in over 101,000 layoffs so far in 2026, with combined financial-activities and information-sector payrolls shrinking by an average of 28,000 jobs a month — updating the broader trend of AI-linked cuts in finance with fresh, sustained monthly figures rather than one-off announcements.
Why it matters — The monthly run-rate suggests AI-linked headcount reduction in finance has become a steady structural trend rather than a series of isolated restructuring events, reinforcing pressure on NZ and AU banks to show workforce transition plans alongside AI rollouts.
MiCA transition deadline passes, triggering mass EU crypto shutdowns as Ripple wins full stablecoin licence
Stablecoin/crypto regulation enforcement · 1-6 July 2026
The EU's MiCA transitional regime for crypto-asset service providers expired on 1 July, forcing any firm without full authorisation to halt EU services; reports suggest over 10 million users of unlicensed platforms could be displaced, with only around 17% of pre-MiCA registrants having converted to full licences. Days later, on 6 July, Luxembourg's regulator upgraded Ripple to a full MiCA licence covering all 30 EEA markets.
Why it matters — MiCA has moved from a looming deadline to a live compliance gate, sharply narrowing the pool of licensed counterparties banks and PSPs can partner with on stablecoin and crypto rails, and rewarding early movers like Ripple and Circle with a first-mover advantage in regulated markets.
[UPDATE] Open USD stablecoin launch sends Circle shares crashing up to 25%
Stablecoin competition and issuer economics · 30 June - 1 July 2026
What's new: since the Open Standard consortium's Open USD stablecoin (backed by Visa, Mastercard, BlackRock, Coinbase and 140+ others) was announced, Circle's shares have fallen as much as 17-25% to a four-month low, compounding a prior removal from Russell indexes, as markets price in the threat to Circle's reserve-yield-driven revenue model.
Why it matters — Open USD's model of sharing reserve yield with adopting businesses rather than the issuer signals a structural shift in stablecoin economics that banks and payment firms weighing stablecoin partnerships will need to factor into commercial terms.
Australia's Consumer Data Right expands to non-bank lenders and BNPL providers from 13 July
Open banking/open finance expansion · From 13 July 2026
Australia's Consumer Data Right regime begins applying to large non-bank lenders and buy-now-pay-later providers from 13 July 2026, starting with mandatory product data-sharing; consumer data-sharing obligations follow from 9 November 2026 for the biggest providers and May 2027 for smaller ones.
Why it matters — The move marks Australia's shift from open banking to open finance by folding BNPL and non-bank credit into the data-sharing regime, offering a staging template that New Zealand regulators and banks building out their own open banking rollout may draw on as they consider scope expansion beyond the big banks.
[UPDATE] NZIER Shadow Board and bank economists split down the middle on tomorrow's knife-edge OCR call
OCR preview / RBNZ decision · 6 July 2026; RBNZ decides 8 July 2026
NZIER's Monetary Policy Shadow Board split 5-4 in favour of holding the OCR at 2.25% at Wednesday's review, while bank economists remain divided on the live decision itself: ANZ, BNZ and UBS are picking a 25bp hike to 2.5%, while Westpac, Kiwibank and ASB expect a hold, citing the recent oil-price fall.
Why it matters — A split committee vote (as occurred in May) is again plausible, meaning a tie-breaking casting vote could determine the rate path feeding straight into mortgage and deposit pricing this spring.
Oil price slide below US$70/bbl undercuts the case for an RBNZ hike
Commodity prices / inflation outlook · Early July 2026
Brent crude has fallen more than 38% from its late-April wartime peak above US$126/bbl to around US$68-70, as Qatar-mediated diplomacy eases Strait of Hormuz shipping disruption, flowing through to lower petrol prices at NZ pumps.
Why it matters — Kiwibank and others cite the softer fuel-driven inflation outlook as reinforcing the case for the RBNZ to hold rather than hike on Wednesday, a direct input into the OCR call and near-term mortgage rate trajectory.
ANZ Business Outlook: confidence jumps, inflation expectations ease into OCR week
Business sentiment · June survey, released early July 2026
ANZ's Business Outlook survey showed headline confidence jumping 27 points to +37 in June, with year-ahead inflation expectations easing from 3.63% to 3.36%, even as reported past activity and pricing intentions softened.
Why it matters — Cooling inflation expectations alongside improving forward sentiment give the RBNZ some cover to hold this week, adding to the data mix behind the split economist calls.
Existing and emerging players across NZ and Australia, plus global names where they're relevant to NZ/AU banking.
Competitor watch — NZ, Australia & globalmedium
Westpac reviews $515bn mortgage book to flag misclassified investor loans
Lending practices / loan book integrity · Broker memo sent early July 2026
Westpac has told mortgage brokers it is proactively flagging borrowers suspected of misclassifying investor properties as owner-occupied (or vice versa) across its $515 billion loan book, and will automatically switch loan classification unless borrowers can prove status; investor loans typically carry rates 25-55 basis points higher than owner-occupier loans.
Why it matters — The clean-up tightens risk-weighting and pricing accuracy on Australia's second-largest mortgage book and signals other majors may follow with similar misclassification crackdowns, with flow-on effects for broker conduct and investor borrowing costs.
Customer-impacting fraud, scam typologies and the liability landscape — NZ-first, with global threat signals.
Fraud & scamscritical
Australia's Scams Prevention Framework goes live, making banks legally liable for scam prevention failures
Reimbursement/liability landscape · Core obligations commenced 1 July 2026; AFCA sole dispute-resolution scheme from 1 July, membership required by 1 September 2026
Australia's Scams Prevention Framework Act took effect this month, imposing six overarching duties (govern, prevent, detect, disrupt, respond, report) on banks, telcos and digital platforms, backed by civil penalties of up to AU$50 million per contravention. AFCA's jurisdiction was separately expanded from March 2026 to cover complaints against receiving banks, not just the victim's own bank. Consumer advocates have criticised the rollout's roughly nine-month delay from the original mid-2025 target as having cost Australians billions in unprotected losses.
Why it matters — This is now the toughest statutory scam-liability regime among NZ's close peers, shifting from voluntary bank codes (as in NZ) to enforceable, cross-sector legal duties with real financial penalties and AFCA as a one-stop dispute forum spanning banks, telcos and platforms — a benchmark NZ's own voluntary NZBA reimbursement code will inevitably be measured against.
Slower-burning structural risks and trends worth getting ahead of — technology, resilience and governance.
Emerging risks & trendscritical
Researchers report first fully autonomous 'agentic' ransomware attack
AI-driven cyber threats · Reported early July 2026 (Sysdig research)
Security researchers documented 'JadePuffer,' an AI agent that independently exploited a vulnerable Langflow instance, pivoted to a Nacos/MySQL server, fixed its own errors mid-attack, and encrypted database configurations without any human operator involvement.
Why it matters — Marks a shift from human-directed to fully autonomous attack chains operating at machine speed, compressing the window banks have to detect and contain an intrusion before encryption or extortion completes.
Financial Stability Board opens consultation on 12 sound practices for AI adoption in finance
AI governance · Published 10 June 2026; consultation closes 22 July 2026, final report due October 2026
The FSB published a consultation report proposing 12 sound practices spanning board-level AI governance, lifecycle risk management, and AI-related cyber/third-party risk, explicitly addressing generative and agentic AI.
Why it matters — Gives a global standard-setter benchmark that national regulators, including New Zealand's, are likely to reference when firming up local AI governance expectations, ahead of a hard October 2026 finalisation deadline.
FBI and Google dismantle NetNut residential proxy network built on 2 million hijacked devices
Cyber threat infrastructure · Takedown announced early July 2026
Law enforcement and Google disrupted NetNut, a residential proxy service built on roughly 2 million secretly compromised home devices, which cybercriminal and state-linked groups used to mask attack traffic; Google logged over 300 distinct threat clusters using it in a single week in June 2026.
Why it matters — Removes a widely used cloaking layer for account-takeover and fraud campaigns against banks, but related proxy botnets remain active, so fraud and detection teams should not expect a lasting drop in obfuscated attack traffic.
Crédit Agricole CIB deepens quantum computing partnership with Pasqal, targets 2028 production use
Quantum computing in finance · Announced 30 June 2026
Crédit Agricole CIB and quantum firm Pasqal advanced their partnership from research to industrialisation, aiming for production use cases in counterparty credit risk measurement and capital efficiency by 2028 using neutral-atom quantum processors.
Why it matters — Shows quantum investment in banking splitting into two parallel tracks — defensive post-quantum cryptography migration and offensive adoption of quantum computing for risk and capital calculations — each needing distinct governance and budget ownership.
BBVA begins pricing corporate loans by climate exposure, ahead of planned retail rollout
Climate risk pricing · Reported 26 June 2026
BBVA has started adjusting loan pricing for corporate clients in agriculture, real estate, leisure, utilities and infrastructure using an internal Transition Risk Indicator that scores climate exposure and adaptation, with plans to extend the approach to retail lending.
Why it matters — Signals climate risk migrating from disclosure and stress-testing exercises into live commercial underwriting decisions, a template other banks — including NZ lenders facing flood exposure and insurance retreat — may need to follow rather than treating climate purely as a prudential reporting exercise.