Cloudbank Digest — RBNZ pencils two more hikes, OCR seen near 3% by year-end +17 more · 11 Jul
Saturday, 11 July 2026 · 18 stories
Showing 18 of 18 stories
Watchlist — key dates ahead
18 Aug 2026Judo Bank releases FY26 full-year results, first look at scale of its Q4 bad-debt provisioning (AU).
1 Sep 2026Australia's Scams Prevention Framework's core obligations for banks, telcos and platforms take effect, backed by up to A$50m per-breach penalties and a private right of action.
2 Sep 2026RBNZ's next Monetary Policy Statement and OCR review.
11 Sep 2026RBNZ submissions close on Deposit Takers Act crisis-preparedness package and tranche-3 exposure-draft standards (recovery/exit planning, loss-absorbing capacity, Continuity of Access to Deposits).
Late Sep 2026RBNZ expected to release findings from the Keeping Cash Local consultation.
30 Sep 2026Heartland shareholders vote on the $620m TSB Bank acquisition and merger, after Toi Foundation trustees decide on the sale (expected August).
1 Oct 2026RBA's ban on card surcharges (Visa, Mastercard, eftpos and Amex) takes effect in Australia, estimated to save consumers and businesses up to A$1.8bn a year.
16 Oct 2026Submissions close on RBNZ's proposed prudential levy consultation on banks, insurers and FMIs; levy to take effect August 2027.
New detail from RBNZ's own Monetary Policy Statement shows annual inflation projected to peak near 3.9% in the June quarter before easing to about 3.3% by September, with the Bank's rate track implying two further 25bp hikes in September and December, taking the OCR to around 3.00%.
Swift has activated a blockchain-based shared ledger letting banks across six continents — including Citi, HSBC, UBS, BNP Paribas, Standard Chartered, Wells Fargo, BNY, DBS and MUFG — move tokenised deposits between themselves around the clock, with final settlement still routed through existing rails as an orchestration layer rather than a replacement for Swift messaging.
The Bank of England, PRA and FCA will jointly start supervising AWS EMEA, Google Cloud EMEA, Microsoft Ireland and Oracle UK as designated critical third parties, following formal designation by HM Treasury. The providers must undergo resilience testing, run self-assessments and report major incidents to regulators.
1 Regulatory — NZ horizon & global signals
New Zealand first; global banking, finance & payments items included where there's an NZ read-across.
Regulatory — NZ horizon & global signalshigh
APRA opens capital rework proposing lighter risk weights for infrastructure and unrated corporate lending
Capital requirements · Consultation opened 29 Jun 2026 (workstream 1 of 3); intended effective date 1 Apr 2027
Australia's prudential regulator has proposed lower risk weights for large infrastructure loans, high-quality unrated corporate exposures and residential development lending, the first of three planned capital workstreams.
Why it matters — This puts APRA in the same lighter-touch camp as the US Basel III Endgame rewrite. Since NZ's big four banks are Australian-owned subsidiaries, any trans-Tasman capital divergence reopens the debate over whether RBNZ's more conservative settings leave local banks less competitive than their parents on lending economics.
FMA sets 2026/27 conduct priorities in first report since gaining full credit-licensing mandate
Conduct regulation · Published early Jul 2026
The FMA's latest Financial Conduct Report sets four priorities for the year ahead: remuneration-driven conflicts, product design, use of complaints data, and fraud detection, while flagging AI's growing role in financial services as an emerging supervisory focus.
Why it matters — This is the FMA's first full-mandate priorities statement since absorbing consumer credit licensing. Banks should expect closer scrutiny of remuneration structures and complaints data, and the explicit AI mention signals AI governance is now on the conduct regulator's agenda too.
NZDD stablecoin's 'not a financial product' ruling draws fresh industry pushback over consumer protection gaps
Digital assets / stablecoin regulation · FMA designation effective 11 Mar 2026; industry pushback resurfaced late Jun 2026
The FMA classified NZDD, a bank-trust-backed NZD stablecoin, as a payment tool rather than a financial product, prompting the NZ Bankers Association to warn of gaps in consumer protection and deposit-guarantee coverage.
Why it matters — While the GENIUS Act, MiCA and the Open USD consortium are building licensed-issuer stablecoin regimes elsewhere, NZ has no bespoke stablecoin framework. This is the clearest local test case of the same deposit-vs-security-vs-payment-tool tension, and pressure on MBIE/RBNZ to close the gap will grow with local volumes.
Focused on banking & payments, but includes cross-industry moves with read-across to financial institutions and their operations.
AI & automation — banking, payments & beyondhigh
JPMorgan's AI investing agents beat a 60/40 portfolio across two decades of backtests
Agentic AI in asset allocation · Bloomberg, 9 Jul 2026
JPMorgan researchers built AI agents, powered by third-party foundation models, that shift equity/bond allocations across four classified market regimes. All eight tested agents beat both a traditional 60/40 portfolio and the bank's own rules-based model on a risk-adjusted basis in historical simulation.
Why it matters — This moves agentic AI from back-office ops (KYC, fraud) into live investment decision-making at a major bank, raising fresh model-risk and explainability questions just as regulators are already probing agentic decision-making in lending and trading — the same governance gap now extends into wealth and advice businesses NZ banks partner into.
Identity-verification vendor AU10TIX's latest report found a 3.89% confirmed fraud rate across payments, banking and trading platforms, with AI-generated identities and synthetic documents now the leading fraud method, overtaking physical forgery, with confirmed fraud rising across every sub-sector.
Why it matters — This is a concrete, dated data point showing generative AI has already flipped fraud typology from physical forgery to synthetic identity — directly relevant to the onboarding and KYC automation NZ and AU banks are racing to deploy, which assumes documents are genuine.
AI & automation — banking, payments & beyondmedium
Banks are running three separate AI stacks, not one, industry benchmark finds
AI operating model / governance · nCino AI in Banking Benchmark, 1 Jul 2026
A survey of 150 senior US banking executives found 84% now run AI at enterprise scale, but as three distinct deployments — generative, predictive and agentic AI — each argued to need its own oversight model rather than one unified governance approach.
Why it matters — This explains why AI model governance keeps topping the list of scaling barriers: practitioners say gen-AI, predictive and agentic AI need three different control frameworks, not one — a useful framing for NZ risk and compliance teams scoping their own AI governance uplift.
Swift goes live with a blockchain shared ledger for 24/7 tokenised bank-money transfers, 17 banks piloting
Payments infrastructure / tokenisation · Live 8-9 Jul 2026, pilot with 17 global banks
Swift has activated a blockchain-based shared ledger letting banks across six continents — including Citi, HSBC, UBS, BNP Paribas, Standard Chartered, Wells Fargo, BNY, DBS and MUFG — move tokenised deposits between themselves around the clock, with final settlement still routed through existing rails as an orchestration layer rather than a replacement for Swift messaging.
Why it matters — This is a direct competitive response to stablecoin rails such as Open USD and AUDC, putting Swift's own infrastructure behind tokenised bank money for the first time. NZ banks are heavily Swift-dependent correspondent-banking users, so this shapes the future shape of the cross-border rails they will eventually plug into.
The UK FCA has published final rules bringing BNPL providers under its regulatory perimeter from 15 July, mandating affordability checks, upfront cost disclosures and Consumer Duty protections, with a temporary permissions regime for existing providers seeking full authorisation.
Why it matters — This closes a long-standing UK regulatory gap and offers a template NZ regulators may watch as they weigh whether to bring local BNPL providers under consumer credit law, following Australia's own CDR/BNPL expansion this month.
European Parliament backs digital euro legislation, trilogue negotiations begin 13 July
CBDC / digital euro · Parliament vote 9 Jul 2026; trilogue starts 13 Jul 2026
MEPs voted 416-169 to advance the digital euro framework into final three-way negotiations between Parliament, Council and Commission, with officials aiming to finalise terms by year-end ahead of a planned 2027 pilot and possible 2029 issuance.
Why it matters — The eurozone's retail CBDC has crossed its most significant legislative hurdle to date, reviving the push to reduce reliance on US-dominated payment rails — a theme that will feed into RBNZ's own digital cash cost-benefit work due later this year.
New detail from RBNZ's own Monetary Policy Statement shows annual inflation projected to peak near 3.9% in the June quarter before easing to about 3.3% by September, with the Bank's rate track implying two further 25bp hikes in September and December, taking the OCR to around 3.00%.
Why it matters — This gives banks a firmer numerical anchor for repricing term deposits and fixed mortgage curves out to Q4, rather than just a qualitative signal that more hikes are coming.
[UPDATE] NZ manufacturing hits five-year high, extends NZD rally to three-week high
NZD / activity data · BNZ-BusinessNZ PMI for June, released 9 Jul 2026
The BNZ-BusinessNZ Performance of Manufacturing Index jumped to 59.7 in June from 51.3 in May, its strongest reading since 2021, pushing NZD/USD to around $0.573, its best level in almost three weeks.
Why it matters — A genuine activity upturn alongside the OCR hike strengthens the case for RBNZ's tightening bias and reduces the odds of an early pause — relevant for business lending demand and NZD-priced import costs.
RBA holds cash rate at 4.35%, citing oil-shock uncertainty
RBA policy · RBA Board decision, Jul 2026
The RBA left its cash rate unchanged at 4.35% after three hikes this year tied to the Iran-driven energy shock, saying it wants to assess the impact of prior increases and ongoing oil-supply disruption before moving again.
Why it matters — A steady-but-watchful RBA alongside a hiking RBNZ narrows the trans-Tasman policy gap, a factor for AUD/NZD cross-flows and for the Australian-owned major banks' funding and pricing decisions in NZ.
[UPDATE] Oil holds above $73 as Kharg Island threat keeps a bid under crude
Oil / Middle East risk premium · 9-10 Jul 2026
Brent held near $75.50/bbl, on track for a roughly 4.7% weekly gain, as the risk premium is sustained by a US threat to strike or seize Iran's Kharg Island export terminal after declaring the earlier ceasefire over.
Why it matters — Sustained above-$70 oil keeps upside risk in RBNZ's inflation track and reinforces the case for further OCR hikes rather than an early pause — a live input for bank economists' forecast updates.
Existing and emerging players across NZ and Australia, plus global names where they're relevant to NZ/AU banking.
Competitor watch — NZ, Australia & globalmonitor
Nubank's Mexican unit wins full banking licence, must launch within 30 days
Global neobank scale-up · CNBV authorisation, 9-10 Jul 2026; must launch within 30 days
Nu Holdings' Mexican subsidiary received formal authorisation from Mexico's banking regulator to operate as a full bank, with a 30-day window to begin operations including payroll and deposit accounts.
Why it matters — Converting a large underbanked customer base into a fully licensed deposit-taker is the same playbook Revolut and Wise are chasing in Australia and NZ — a live data point on how fast a neobank can move from e-money/credit licences to full banking status at scale.
The Bank of England, PRA and FCA will jointly start supervising AWS EMEA, Google Cloud EMEA, Microsoft Ireland and Oracle UK as designated critical third parties, following formal designation by HM Treasury. The providers must undergo resilience testing, run self-assessments and report major incidents to regulators.
Why it matters — This is the sharpest regulatory move yet on cloud concentration risk, and cuts against Australia's APRA, which just eased its own cloud/third-party rules under CPS 230 — global supervisors are diverging on how hard to lean on hyperscalers. NZ banks running on the same four providers should expect this regime to become a reference model in future RBNZ outsourcing-policy consultations.
Avaloq SaaS outage disrupts roughly 21 banks and wealth managers for days
Third-party/cloud concentration risk crystallising · Outage began 2 Jul 2026, resolution ongoing through the week
A hardware failure at a data-centre subcontractor knocked out Avaloq's SaaS trading services, forcing affected banks to place orders with brokers by phone while their (locally run) core banking systems stayed unaffected; roughly 21 client institutions were hit.
Why it matters — Avaloq is a major core-banking/wealth-management vendor used widely across Europe, the Gulf and Asia-Pacific. A multi-day SaaS outage triggered by one subcontractor is a live illustration of exactly the concentration risk that UK, EU and (soon) NZ resilience regimes are trying to force banks to plan around.
Deutsche Bank probes ransomware gang's claim of a third-party breach exposing employee data
Third-party cyber risk / DORA incident-reporting test · Breach claim posted 4 Jul 2026; investigation ongoing
A ransomware group posted employee emails, password hashes and internal records it says came from Deutsche Bank, but the bank says the compromise sits with an external German supplier running a sales-partner incentive platform, not its own network.
Why it matters — This is effectively a live-fire test of DORA's third-party incident-reporting regime — whether vendor breaches get flagged to regulators before they hit leak sites will shape how supervisors judge banks' vendor oversight going forward.
EU regulators add extreme-heat losses as a new stress-test category for banks
Climate risk in stress testing (new physical-risk category) · EBA scoping work reported 7 Jul 2026, ahead of the 2027 EU-wide stress test
The European Banking Authority is working out how to quantify extreme-heat losses for banks, potentially making heat a distinct stress-test category alongside the flood scenario already built into its draft 2027 EU-wide stress test methodology.
Why it matters — This is a different mechanism from the ECB's collateral-discounting move already flagged — it's the first time heat-specific physical risk would sit inside the core EU supervisory stress-test framework, widening the range of climate variables banks must model.