ECB summons banks over AI flaws

The European Central Bank has called major banks to a hastily arranged meeting after supervisors concluded that newer artificial intelligence models had exposed weaknesses in lenders’ controls, according to the Financial Times. The intervention comes as ECB officials have been warning publicly that AI is moving deeper into core banking operations and creating new operational and cyber risks. The ECB did not present the issue as a distant technology debate. It has tied AI use to governance, risk management and resilience requirements that already sit inside its supervisory agenda. ### Why did the ECB move now? The Financial Times reported on May 24 that the ECB had summoned banks to press them to fix flaws exposed by the latest AI models. The paper said supervisors planned to underline the seriousness of the risks to the financial system, indicating the meeting was convened more quickly than a routine supervisory exchange. Frank Elderson, the ECB executive board member who also serves as vice-chair of its supervisory board, said on May 13 that euro area banks should prepare quickly for cyberattacks launched with the help of Anthropic’s Mythos AI model or similar tools, according to Reuters. (markets.ft.com) That warning provides the clearest public signal so far of the concern inside ECB supervision about the pace of change in AI capabilities. ### What weaknesses are supervisors worried about? Pedro Machado, speaking at a KPMG RiskTech conference in Frankfurt on February 24, said AI use in banking was “no longer marginal” from a supervisory standpoint. He said more than 85% of large banks under European supervision already use AI in some form, with adoption accelerating as generative and agentic AI spread. (msn.com) Machado said supervisors were seeing AI used in IT operations, legal and document analysis, and front-line applications such as customer support and internal knowledge tools. He said that breadth mattered because AI now cuts across business lines, control functions and strategic decision-making, making governance and risk management central supervisory concerns. (bankingsupervision.europa.eu) ### Is the ECB talking about efficiency, or about resilience? The ECB’s own supervisory language has put resilience at the center of the discussion. In the February speech, Machado said technology and innovation had to go “hand in hand” with strong governance, sound risk management and compliance with rules including the Digital Operational Resilience Act and the EU AI Act. (bankingsupervision.europa.eu) The ECB’s supervisory priorities for 2026-28 list operational resilience and robust ICT capabilities as one of the main areas of focus for supervised banks. The priorities say risks once considered remote are becoming more likely in a more fragile environment and identify technological disruption as part of that broader risk picture. (bankingsupervision.europa.eu) ### Which banks are in scope? The ECB Banking Supervision arm directly oversees the euro zone’s biggest lenders under the Single Supervisory Mechanism. The central bank has not publicly listed the banks called to the meeting in the material available so far, but its supervision framework covers the significant institutions under direct ECB oversight. (bankingsupervision.europa.eu) The practical issue for those banks is that AI is no longer confined to pilot projects. Machado said the supervisory question is increasingly where AI is being used and how deeply it is embedded in operations, rather than whether banks are experimenting with it at all. ### What should readers watch next? (bankingsupervision.europa.eu) May 2026 is the immediate marker because that is when the hastily arranged ECB meeting with banks was reported to be taking place. Public clues about the follow-up are likely to come from future ECB supervision speeches, interviews and updates to supervisory priorities, including comments from Frank Elderson and other officials in the ECB Banking Supervision arm. (markets.ft.com) (bankingsupervision.europa.eu)