ECB supervision warns European banks to tighten risk controls as threats evolve

ECB supervision warns European banks to tighten risk controls as threats evolve
Banks face new risks

European banks are entering a more uncertain phase after a period of stronger profitability, solid capital positions and broadly satisfactory asset quality. The European Central Bank’s supervisory arm says that resilience remains intact, but lenders must not become complacent as geopolitical, climate, technology and private credit risks grow.

Highlights

  • ECB supervisors urge European banks to use the current favourable earnings climate to strengthen resilience, warning that profitability could reverse if economic or rate conditions change.
  • Asset quality remains sound, but the ECB detects credit risk deterioration in certain countries and segments, stressing strict lending standards, prudent collateral, and severe scenario planning in capital management.
  • Operational and technological risks—including dependency on third-party providers and AI-driven cyberattacks—along with market risks from valuations, investor concentration, and bank/non-bank links, require heightened vigilance and robust supervisory frameworks.

Supervisory priorities for a shifting risk backdrop

As reported by European Central Bank, citing the ECB Supervisory Arm, European banking supervisors are urging lenders to use the current favourable period to strengthen resilience rather than assume recent earnings will persist.

The speech says higher interest rates have helped restore profitability, but that trend could reverse if the rate environment changes, economic growth slows or the cost of risk rises. It adds that the sector is better capitalised and more prepared than before the 2008 financial crisis, while warning that excessive optimism itself can become a source of vulnerability.

Supervisors say credit risk management remains the first priority. While aggregate asset quality is still sound, they are seeing signs of deterioration in some segments and countries, and some institutions are already recording a higher cost of risk.

The ECB says banks must keep strict lending standards, use prudent collateral valuations and ensure pricing reflects underlying risks. It also says capital planning should incorporate sufficiently severe scenarios, changes in portfolio composition and the effect of new prudential requirements, with distribution decisions aligned to each bank’s risk profile and future needs.

A recent reverse stress test on geopolitical risk also highlighted weaknesses in banks’ scenarios, their understanding of transmission channels and the credibility of management responses. The ECB says preparation cannot rely on a single scenario because geopolitical shocks can combine credit losses, market moves, liquidity stress and operational disruption.

Climate and nature-related risks are also becoming more material, the speech says, pointing to extreme temperatures and unusually low water levels on the Rhine and Danube in summer 2026. It says banks have made progress, but still show shortcomings in assessing physical risks and integrating them into risk management procedures.

Technology, funding pressures and broader market effects

The ECB says operational and technological risk is its second main area of focus as banks deepen their dependence on IT infrastructure, cloud services and third-party providers. It warns that an outage at one large provider can affect several banks at once, making continuity of critical services a central part of resilience.

The speech says artificial intelligence increases both opportunity and risk. It can help banks improve processes, analyse large datasets and enhance customer services, but it can also accelerate cyberattacks by shortening the time between identifying and exploiting vulnerabilities.

Supervisors say banks can no longer take months to fix identified shortcomings and that management bodies need a clear AI strategy, defined responsibilities, reliable data and oversight across systems’ full life cycle. The ECB also highlights persistent weaknesses in risk data aggregation and reporting, saying these can hinder decision-making in a crisis even when headline ratios appear robust.

Beyond individual banks, the speech points to broader market risks from geopolitical tensions, elevated valuations, investor concentration and the growing links between banks and non-bank financial intermediaries. Private credit can diversify funding for the economy, it says, but can also create leverage and interconnected exposures that are difficult to measure fully.

The ECB says none of these factors alone signals an imminent crisis, but their interaction requires close attention. It also defends preserving the core post-crisis regulatory framework, while supporting efforts to remove redundancies, address inconsistencies and simplify supervisory approaches without weakening the sector’s resilience.

AI agents and automated switching in retail finance was the focus of our earlier article, which explored how constant monitoring could undermine banks’ ability to benefit from customer inertia in deposits and other long-duration products. We noted that as automation removes frictions, lenders and insurers may face tighter margins and be pushed toward more transparent pricing and tougher rate competition.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.