Cloudbank Digest — India, NZ agree to link UPI payment rails +24 more · 12 Jul
Sunday, 12 July 2026 · 25 stories
Showing 25 of 25 stories
Watchlist — key dates ahead
18 Aug 2026Judo Bank releases FY26 full-year results, first look at scale of its Q4 bad-debt provisioning (AU).
1 Sep 2026Australia's Scams Prevention Framework's core obligations for banks, telcos and platforms take effect, backed by up to A$50m per-breach penalties and a private right of action.
2 Sep 2026RBNZ's next Monetary Policy Statement and OCR review.
11 Sep 2026RBNZ submissions close on Deposit Takers Act crisis-preparedness package and tranche-3 exposure-draft standards (recovery/exit planning, loss-absorbing capacity, Continuity of Access to Deposits).
Late Sep 2026RBNZ expected to release findings from the Keeping Cash Local consultation.
30 Sep 2026Heartland shareholders vote on the $620m TSB Bank acquisition and merger, after Toi Foundation trustees decide on the sale (expected August).
1 Oct 2026RBA's ban on card surcharges (Visa, Mastercard, eftpos and Amex) takes effect in Australia, estimated to save consumers and businesses up to A$1.8bn a year.
16 Oct 2026Submissions close on RBNZ's proposed prudential levy consultation on banks, insurers and FMIs; levy to take effect August 2027.
During Prime Minister Modi's state visit to Auckland, India and New Zealand agreed to work toward linking India's UPI real-time payment rail with New Zealand's domestic fast-payment infrastructure as part of a newly elevated bilateral Strategic Partnership; UPI already operates in more than eight other countries.
RBNZ's "Keeping Cash Local" proposal to mandate minimum bank cash withdrawal, deposit and coin-swap access has drawn more than 5,000 public submissions, prompting the Bank to publish the legal basis for a statutory cash standard should a voluntary industry approach fall short.
USTR's Section 301 forced-labour findings propose lifting duties on NZ dairy, lamb and wine to 12.5% from the current 10% when the section 122 tariff exemption expires on 24 July, while beef, kiwifruit, timber and offal would stay exempt; a final US determination is expected before the deadline.
1 Regulatory — NZ horizon & global signals
New Zealand first; global banking, finance & payments items included where there's an NZ read-across.
Regulatory — NZ horizon & global signalshigh
RBNZ's cash-access consultation draws over 5,000 submissions as legal backstop looms
RBNZ's "Keeping Cash Local" proposal to mandate minimum bank cash withdrawal, deposit and coin-swap access has drawn more than 5,000 public submissions, prompting the Bank to publish the legal basis for a statutory cash standard should a voluntary industry approach fall short.
Why it matters — A minimum cash-service standard would impose new branch, ATM and shared multibank-site obligations on retail banks regardless of the shift to digital payments, with RBNZ signalling it is prepared to legislate if voluntary compliance fails.
Kiwibank joins New Zealand's open banking regime as fifth designated data holder
Open banking / Consumer Data Right rollout · Payments data live from 1 Jun 2026; full account data by 1 Dec 2026
Kiwibank has been designated under the Customer and Product Data Act, joining ASB, ANZ, BNZ and Westpac in a phased rollout that starts with payment-initiation access and extends to full account and transaction data sharing by December.
Why it matters — Completes designation of all major retail banks under the mandatory open banking regime, giving accredited fintechs and aggregators zero-fee data and payment-initiation access across effectively the whole national deposit base.
MBIE consults on whether stablecoins and token-based payments need bespoke NZ licensing
Payments and stablecoin regulatory gap · Discussion document consultation ran through Q2 2026
MBIE's review of New Zealand's payment services regulation directly asks whether existing rules are adequate for stablecoins and other token-based payment models, building on an FMA finding that regulatory fragmentation is constraining local adoption.
Why it matters — Comes as seven major economies now treat stablecoins as regulated payment instruments; the outcome will determine whether NZ issuers get a purpose-built licensing regime or remain under patchwork AML/CFT-only oversight, directly relevant to the NZDD 'not a financial product' controversy.
Final phase of NZ's AML/CFT overhaul, an Omnibus Bill, being prepared for pre-election introduction
AML/CFT modernisation, tranche 3 · Expected introduction before the House rises for the election; enactment likely 2027
A third and final AML/CFT Omnibus Amendment Bill is being prepared for introduction ahead of the election, set to add FIU/DIA powers on targeted financial sanctions alongside further compliance-cost relief for reporting entities.
Why it matters — Lands just as reporting entities are bedding in the 1 July DIA single-supervisor transition, signalling a further round of rule changes even as implementation would likely carry into the next Parliamentary term.
APRA opens governance rewrite, proposes 12-year board tenure limit for banks and insurers
Board governance / prudential standards · Consultation opened 16 Jun 2026, closes 28 Aug 2026; final standard expected Q4 2026
APRA's draft CPS 510 would consolidate five existing governance standards into one framework, impose a 12-year default tenure limit on non-executive directors, and remove fit-and-proper reporting duplicated by the Financial Accountability Regime.
Why it matters — Sets a template Australian-parented NZ banks will likely see mirrored in group governance policy, and signals a direction RBNZ may follow as it builds out governance expectations under the Deposit Takers Act.
Focused on banking & payments, but includes cross-industry moves with read-across to financial institutions and their operations.
AI & automation — banking, payments & beyondhigh
Visa takes agentic commerce live across 30+ European banks, led by CaixaBank
Agentic payments · 2 Jul 2026
Visa announced AI agents are now completing live retail purchases on behalf of cardholders through more than 30 European issuing banks, including Barclays, HSBC, Lloyds, BBVA, ING and Revolut, with CaixaBank executing the first agent-initiated transaction on standard card rails, authenticated via Visa Payment Passkeys.
Why it matters — Moves agentic commerce from single-bank pilots to a multi-issuer network almost overnight, mirroring the Mastercard/CBA/Westpac milestone in Australia — NZ banks and payment rails will face pressure to show a comparable roadmap.
New industry data shows one institution logged over 8,000 deepfake attempts in eight months tied to US$347 million in losses, with synthetic identities now roughly 11% of global fraud cases, up eightfold year on year; vendors are responding by pitching continuous, on-device biometric checks rather than one-off login verification.
Why it matters — The direction of travel is from point-in-time ID checks to continuous, networked verification across the customer session — a materially different KYC architecture than most NZ banks currently run.
AI & automation — banking, payments & beyondmedium
Identity vendor Persona plugs bank onboarding into government digital ID wallets
KYC onboarding · 7 Jul 2026
Persona has extended its onboarding platform to natively read and cryptographically validate credentials from sovereign digital ID wallets, including Germany's EUDI Wallet, Singapore's Singpass and Australia's ConnectID, plus bank-issued NFC tokens, letting institutions verify a customer against a government-issued credential instead of a scanned document.
Why it matters — As government digital ID schemes mature, banks that can ingest wallet credentials directly stand to cut onboarding drop-off and document-forgery exposure — relevant as NZ's own digital identity trust framework matures.
During Prime Minister Modi's state visit to Auckland, India and New Zealand agreed to work toward linking India's UPI real-time payment rail with New Zealand's domestic fast-payment infrastructure as part of a newly elevated bilateral Strategic Partnership; UPI already operates in more than eight other countries.
Why it matters — RBNZ's own payments-modernisation papers have cited UPI as the global benchmark for the real-time rails NZ currently lacks; a formal government-to-government link could accelerate the RBNZ-led real-time payments programme and reshape its scope.
US Congress passes four-year ban on a Federal Reserve CBDC
CBDC · 10 Jul 2026
Both chambers of Congress passed a housing bill carrying a provision that bars the Federal Reserve from issuing a retail central bank digital currency through 2030, sending it to the President for signature; the prohibition applies only to the Fed and leaves private bank or stablecoin digital-dollar products untouched.
Why it matters — Cements a widening policy split between the US, now legislating against a CBDC while backing private stablecoins, and jurisdictions such as NZ, the EU and China that continue exploring public digital currency.
Circle wins US national trust bank charter for USDC custody
Stablecoin regulation · 10 Jul 2026
The US Office of the Comptroller of the Currency approved Circle to open First National Digital Currency Bank, branded Circle National Trust, making it the first major stablecoin issuer to hold a federal trust bank charter, providing federally regulated custody for USDC.
Why it matters — Federal bank status gives Circle a regulatory edge over rivals in the crowded post-GENIUS Act stablecoin race, including the newly formed 140-firm Open USD consortium, and shows US regulators pulling stablecoin issuers further into mainstream banking.
Hong Kong builds gold and yuan settlement rails to counter dollar stablecoins
Digital assets geopolitics · 11 Jul 2026
Hong Kong began trial operations of a gold clearing and settlement system, relaunched dollar-denominated gold futures and flagged a yuan-denominated version, alongside expanded Bond Connect liquidity, as Beijing builds non-dollar settlement alternatives seen as a direct counter to USD-pegged stablecoins.
Why it matters — A credible gold/yuan settlement alternative could fragment the emerging stablecoin-led cross-border rails that Swift, Visa, Mastercard and US issuers are racing to dominate — worth watching for any read-through to NZ's trade and correspondent-banking exposure in Asia.
Global dairy prices slump 4.9% at GDT auction, clouding new-season outlook
Commodities / export earnings · early Jul 2026
The GlobalDairyTrade index fell 4.9% to average roughly US$3,793 a tonne, its steepest single-auction drop in two years, with whole milk powder down 4.4% and cheddar down more than 12%, landing right at the start of the new season which Fonterra opened with a farmgate milk price forecast centred on $9.75/kgMS.
Why it matters — Dairy receipts are a major driver of rural credit quality and regional spending; a weak opening auction adds downside risk to farmer cash flow and rural loan-book provisioning at the major banks.
US moves toward 12.5% tariff on NZ dairy, lamb and wine, deadline 24 July
Trade policy · 7-10 Jul 2026
USTR's Section 301 forced-labour findings propose lifting duties on NZ dairy, lamb and wine to 12.5% from the current 10% when the section 122 tariff exemption expires on 24 July, while beef, kiwifruit, timber and offal would stay exempt; a final US determination is expected before the deadline.
Why it matters — A confirmed increase would raise costs for primary-sector exporters heavily reliant on the US market, adding pressure to export revenue and the rural loan books of the major NZ banks.
Existing and emerging players across NZ and Australia, plus global names where they're relevant to NZ/AU banking.
Competitor watch — NZ, Australia & globalmedium
Westpac's new AI chief pushes staff to ration token spend
AI cost governance in banking · 8-9 Jul 2026
Westpac is now tracking employee AI token consumption firm-wide, including in software teams with access to premium models, and routing simpler tasks to cheaper models to contain costs, in a push led by new chief AI officer Dan Jermyn, who joined this year from CBA.
Why it matters — As the big four race to embed AI, cost discipline is emerging as the next competitive battleground alongside capability — watch whether ANZ, ASB, BNZ or Kiwibank follow with similar token-governance regimes.
Klarna applies for a US bank charter, seeking to cut ties with partner banks
BNPL-to-bank convergence · 6 Jul 2026
Klarna has filed with Utah regulators and the FDIC to form Klarna Bank USA, an industrial bank that would let it hold deposits and fund its own loans directly rather than through partner banks, with a former Utah bank chief lined up to run the new entity if approved.
Why it matters — A licensed Klarna would deepen the trend of BNPL players seeking bank-grade balance sheets, sharpening the read-across for CBA's StepPay and NAB's Now Pay Later as they defend turf against Afterpay, Zip and Klarna in the Australian market.
Revolut opens its crypto exchange to AI assistants for hands-free trading
Agentic AI trading · 10 Jul 2026
Revolut X now lets third-party AI assistants such as Claude and Gemini analyse markets, monitor balances and prepare crypto trades via plain-language prompts, with every order still needing explicit user approval before execution, via an open API any compatible AI tool can plug into.
Why it matters — Revolut is building out agentic-AI features globally while simultaneously expanding personal and business banking in New Zealand, widening the gap in product sophistication it can point to against ASB, BNZ and Kiwibank's more conventional digital offerings.
Australia's National Anti-Scam Centre has stood up a time-limited fusion cell of banks, telcos, digital platforms and regulators to disrupt fake online casino sites, dubbed 'scambling', after reported losses jumped to roughly A$1.6m in 2025 from A$449,000 the year before, with over 45% of complaints from First Nations Australians.
Why it matters — Extends the fusion-cell model banks already use against investment and romance scams into a new gambling-adjacent typology, and mirrors the sector-coordination approach NZ's own Anti-Scam Alliance is building toward.
Nearly one in five Australian banks still has no email-spoofing defence, Proofpoint finds
Email/domain spoofing defence gap · 1 Jul 2026
A Proofpoint DMARC analysis of 78 APRA-registered banks found just 41% enforce the strongest 'reject' policy that actively blocks spoofed emails, while 18% have no DMARC record at all, up only modestly from 22% at reject-level protection when Proofpoint first ran the analysis in 2023.
Why it matters — Unprotected bank domains are a low-cost entry point for AI-generated phishing lures feeding downstream fraud losses, sitting awkwardly alongside Australia's Scams Prevention Framework, which puts legal liability for scam prevention failures on banks.
Malwarebytes flags 'mule betting' as a fast-growing money-mule recruitment tactic
Money-mule recruitment typology · 10 Jul 2026
New Malwarebytes research describes criminals coaxing students, job seekers and dating-app users into opening gambling accounts in their own name, then using those accounts to place bets that layer and launder stolen funds, with requests escalating from small favours to handing over full account control.
Why it matters — New Zealand's Fraud Intelligence Exchange has already flagged over 5,000 local mule accounts and ANZ has separately warned young Kiwis about mule recruitment; a betting-account variant opens a channel existing mule-detection rules may not yet catch.
US scam losses hit US$68bn in 2025 as Gallup finds AI involved in roughly 1 in 8 cases
Scam-scale benchmark · 9 Jul 2026
A Gallup/Stop Scams Alliance survey of over 5,000 US adults estimated 15.1 million Americans lost a combined US$68 billion to scams in 2025, with AI or deepfakes implicated in about 12% of successful cases, and most victims reporting lasting mental-health harm.
Why it matters — Gives NZ and AU regulators a large-sample comparator for sizing their own scam-loss and AI-attribution figures, and reinforces that AI-enabled fraud is still a minority, if fast-growing, share of total losses.
Slower-burning structural risks and trends worth getting ahead of — technology, resilience and governance.
Emerging risks & trendshigh
India's RBI proposes mandatory AI 'kill switches' and bans black-box credit models
AI governance and model risk · 24 Jun 2026 (comments close 24 Jul 2026)
The Reserve Bank of India's draft Guidance on Regulatory Principles for Model Risk Management would require every bank and NBFC to maintain board-approved model risk frameworks, tested kill-switch capability to suspend misbehaving AI models, explainability for credit-scoring systems, and clear disclosure when customers interact with AI.
Why it matters — Joins the Bank of England and Singapore's MAS in mandating AI override capability, but goes further by explicitly outlawing opaque credit-scoring algorithms — a marker for how far model governance expectations may travel as NZ calibrates its own AI supervisory approach.
Deutsche Bank investigates ransomware gang's claim of data theft via external supplier
Cyber threats / third-party risk · 4-9 Jul 2026
Ransomware group 'Unsafe' claims to have stolen Deutsche Bank employee data by breaching an external service provider in Germany; the bank says its own network was not compromised and is still verifying the extent of any exposure.
Why it matters — A live test of how a major bank distinguishes and communicates third-party versus internal exposure under incident-reporting regimes — a distinction NZ banks must also nail down under RBNZ's 72-hour material-incident reporting requirement.
Bank of England warns of 'imminent' climate risk to UK financial stability, flags possible insurance crisis
Climate risk · 3 Jul 2026
The Bank of England's July Financial Stability Report warns that extreme weather could trigger a UK insurance crisis and that a rapid market repricing of climate risk across bonds, equities and government debt could match past stress episodes; it also finds progress by PRA-supervised firms on embedding climate risk remains uneven.
Why it matters — Elevates climate risk from a disclosure exercise to a named financial-stability scenario with quantified asset-repricing shock potential, raising the bar for how thoroughly banks and insurers elsewhere, including NZ, need to stress-test physical and transition risk.
SWIFT makes back-office data-flow security control mandatory under 2026 security framework
SWIFT governance and resilience · Jul-Dec 2026 attestation window
SWIFT's Customer Security Controls Framework v2026 elevates 'Control 2.4', covering the security of data flows between banks' back-office systems and the SWIFT secure zone, from advisory to mandatory; institutions must self-attest during the July-December 2026 cycle, with a final deadline of 31 December.
Why it matters — Non-compliant institutions can be flagged to counterparties via SWIFT's security attestation directory, effectively a peer-pressure enforcement mechanism — a governance item for any SWIFT-connected NZ bank's year-end compliance planning.