Cloudbank Digest — NZ inflation hits two-year high +19 more · 21 Jul
Cloudbank Digest — NZ inflation hits two-year high +19 more · 21 Jul
NZ CPI hits a two-year high, FMA flags KiwiSaver fraud and commission risks, and US regulators miss the stablecoin rules deadline.
Top 3 today
- NZ June-quarter CPI due today, banks brace for two-year-high inflation print
- FMA flags KiwiSaver first-home withdrawal fraud and lending commission conflicts as 2026/27 priorities
- [UPDATE] US regulators miss GENIUS Act's one-year deadline for final stablecoin rules
Regulatory — NZ horizon & global signals
New Zealand first; global banking, finance & payments items included where there's an NZ read-across.
[HIGH] [UPDATE] US regulators miss GENIUS Act's one-year deadline for final stablecoin rules
Stablecoin regulation - Deadline missed 18 July 2026; comment periods run to 4 Aug (FDIC AML proposal) and 21 Aug (joint customer-ID rule); effective date pushed to 18 Jan 2027 or 120 days after final rules, whichever is later
None of the five US agencies tasked with implementing the GENIUS Act met its one-year, 18 July deadline for final stablecoin rules, instead issuing ten notices of proposed rulemaking covering reserves, redemption, AML and customer identification rather than completed regulations. Two of those proposals remain open for public comment into August, leaving issuers without a settled compliance picture as the law's effective date slips.
Why it matters: The delay stalls the global regulatory benchmark other jurisdictions, including New Zealand, have been watching to calibrate their own stablecoin settings; MBIE's ongoing review of whether stablecoins need bespoke NZ licensing, and the unresolved status of the NZDD stablecoin, now have less US precedent to anchor to, likely prolonging the grey area local banks face in deciding whether to service stablecoin issuers.
Source: The Block, Cryptobriefing
[MEDIUM] DIA publishes 23-document AML/CFT guidance suite as New Zealand's sole supervisor
AML/CFT - Guidance suite published 1 July 2026, the day DIA became sole AML/CFT supervisor; law-firm analysis circulated through mid-July
The Department of Internal Affairs released one of its largest AML/CFT guidance updates in years, 23 documents spanning customer due diligence, wire transfers, prescribed transaction reports and programme reviews, timed to its first day as New Zealand's sole AML/CFT supervisor. The refreshed material confirms that, since 19 May 2026, verification of a customer's source of wealth and source of funds is risk-based rather than automatic, among other changes to reporting entities' obligations.
Why it matters: With supervision now consolidated under one regulator, banks and other reporting entities face a reset of practical compliance expectations; the move to risk-based source-of-wealth checks could ease onboarding friction for lower-risk customers while sharpening scrutiny where genuine red flags exist.
Source: Department of Internal Affairs, Russell McVeagh
[HIGH] FMA flags KiwiSaver first-home withdrawal fraud and lending commission conflicts as 2026/27 priorities
Conduct regulation - Financial Conduct Report for 2026/27 published; first such report since FMA took over consumer credit conduct oversight from the Commerce Commission on 1 July 2026
The FMA's newly published Financial Conduct Report confirms active investigations into fraudulent or misapplied KiwiSaver first-home withdrawals, alongside targeted monitoring of car loans, mortgage lending and transaction-account design. The regulator also put financial advice providers on notice over inconsistent commission disclosure and remuneration structures that may favour writing new business over servicing existing clients.
Why it matters: This is the first conduct roadmap since the FMA absorbed consumer credit oversight, giving lenders and advisers a concrete signal of where enforcement resource lands first; banks and non-bank deposit takers should expect closer scrutiny of fraud-detection controls around KiwiSaver withdrawals and of adviser commission structures.
Source: interest.co.nz, NZ Adviser
AI & automation — banking, payments & beyond
Focused on banking & payments, but includes cross-industry moves with read-across to financial institutions and their operations.
[MEDIUM] Wells Fargo rolls out AI Teammate for financial advisers
AI customer service & advisor tools - Launched 15 July 2026
Wells Fargo has switched on an AI chat assistant, built on Google Cloud's Agentspace platform, that lets wealth advisers query the bank's internal Advisor Gateway system in plain language for product, workflow and process guidance rather than searching manually. More than 2,000 staff are already using the underlying Agentspace tooling, with wider rollout planned across all Wealth & Investment Management channels.
Why it matters: Adds a fourth major US bank (after BofA, Morgan Stanley, JPMorgan) publicly arming frontline advisers with agentic copilots, reinforcing that adviser-facing AI is now table stakes rather than a differentiator — a pattern NZ wealth and private-banking teams will be benchmarked against.
Source: Banking Dive, Google Cloud Blog
[MEDIUM] Bank of America creates dedicated AI-transformation and digital-assets leadership roles
AI operating model & governance - Announced 17 July 2026
Bank of America has named Kevin Milsom to a new head-of-AI-transformation role overseeing AI implementation across its global markets platforms, while Sonali Theisen adds oversight of the bank's digital-assets platform (stablecoins, tokenised deposits, custody) to her existing electronic-trading remit. The moves follow BofA's June appointment of a global head of digital-asset transformation.
Why it matters: Signals that large banks are institutionalising AI adoption as a standalone executive function rather than leaving it inside technology or operations — a governance model NZ banks scaling their own AI programmes will likely be pushed to mirror as boards demand clearer accountability.
Payments innovation & digital assets
[MEDIUM] South Korea unveils bank-led won stablecoin and CBDC roadmap
Stablecoins / CBDC - 20 July 2026
South Korea's government and ruling party unveiled a roadmap pairing foreign-exchange liberalisation with a legal framework for bank-led won-denominated stablecoins, pledging fortnightly legislative reviews and re-introduction of the Digital Asset Basic Act in September 2026. The Bank of Korea also plans to expand its institutional CBDC-tokenised government bond pilot and join the BIS's Project Agora cross-border settlement initiative.
Why it matters: South Korea joins Japan and Hong Kong in steering stablecoin issuance toward supervised banking consortiums rather than pure crypto-native issuers, reinforcing a global regulatory consensus New Zealand policymakers are watching as MBIE weighs bespoke licensing for NZD-denominated tokens such as NZDD.
Source: Crypto Times, crypto.news
[HIGH] US CFPB signals open banking rewrite will let banks charge fintechs for data access
Open banking - Testimony 15 July 2026
US CFPB acting director Russell Vought told Congress the bureau is close to publishing a replacement for its Section 1033 open banking rule that would, unlike the shelved Biden-era version, allow banks to charge fintechs and data aggregators for API access once a free-request threshold is exhausted, with fees capped at cost-recovery for maintaining the access infrastructure.
Why it matters: This reframes the global 'who pays for open banking' debate away from an assumption of free mandated data-sharing toward a cost-recovery model — a precedent Payments NZ's API Centre and MBIE will weigh as they settle reciprocity and access-fee questions for New Zealand's own regime.
Source: ABA Banking Journal, PYMNTS
[MEDIUM] Stablecoin settlement volume overtakes the US ACH network
Digital assets - Reported 19 July 2026
New data reported by Forbes puts on-chain stablecoin settlement volume at roughly US$7.5 trillion, surpassing throughput on the US ACH network and marking stablecoins' shift from a crypto-trading tool into a mainstream payment settlement rail.
Why it matters: Volume now rivalling a core domestic clearing system raises the stakes for banks worldwide to define stablecoin custody, on/off-ramp and treasury strategies rather than treat digital dollars as a niche product — a dynamic feeding directly into NZ's own stablecoin-licensing consultation.
Source: Forbes
[MEDIUM] Merchants keep fighting Visa-Mastercard's US$38bn swipe-fee settlement
Card schemes - Ongoing, latest filings mid-July 2026
US retail groups, including major chains, continue objecting to the preliminarily approved US$38bn Visa-Mastercard interchange settlement, arguing it locks in only modest fee reductions (about 0.1 percentage points a year over five years) while granting the schemes broad protection from future litigation; a final fairness hearing is still to come.
Why it matters: How this long-running US case resolves will shape global reference points for card-scheme interchange economics, running in parallel with New Zealand's own interchange-cap fight as the Commerce Commission works toward a final decision on commercial-card fees.
Banking & finance — macro
[HIGH] NZ June-quarter CPI due today, banks brace for two-year-high inflation print
Inflation - Stats NZ release, 21 Jul 2026
Stats NZ publishes the June-quarter CPI today, with ANZ, Westpac, ASB and BNZ all converging on 4.1% annual inflation (Kiwibank tips 4.2%), up from 3.1% in the year to March and the highest reading in two years, driven mainly by a fuel-price spike tied to the Middle East conflict.
Why it matters: A hot, fuel-driven print keeps the pressure on for further OCR tightening toward the roughly 3% year-end level banks already expect, reinforcing near-term upward pressure on mortgage and term-deposit pricing ahead of the 2 September MPS.
Source: interest.co.nz, Stats NZ
[MONITOR] Fed rate-hike odds firm ahead of 29 July FOMC as oil-driven inflation lingers
Futures markets now imply roughly a coin-flip chance of a Fed hike at the 29 July meeting, up from about a third a week earlier and under a fifth in early July, as elevated oil prices keep core US inflation running hot; NZD/USD has held in the high-$0.58s through the repricing.
Why it matters: A more hawkish Fed path would narrow the NZ-US rate differential more slowly, a swing factor for NZD funding costs and offshore wholesale borrowing that NZ banks pass through to lending rates.
Source: CNBC
Competitor watch — NZ, Australia & global
Existing and emerging players across NZ and Australia, plus global names where they're relevant to NZ/AU banking.
[HIGH] [UPDATE] Zip locks in 16 August closure date for New Zealand BNPL exit, leaving Afterpay as last major player standing
BNPL market consolidation - New purchases stop 17 Aug 2026
New detail beyond the exit announcement already tracked: Zip has now set a firm date, closing its New Zealand book from 16 August 2026 — new purchases stop the next day and its Pay-in-4 product is discontinued, while existing customers keep repaying under current terms. With Laybuy having already withdrawn, the exit leaves Afterpay as the only major BNPL operator still trading in New Zealand.
Why it matters: A concentrated NZ BNPL market hands Afterpay materially more merchant-negotiating leverage and reduces price competition just as regulators elsewhere (UK, Australia) are tightening BNPL oversight; NZ policymakers may face fresh pressure to ensure a near-monopoly provider doesn't dictate terms to retailers.
[MEDIUM] ACCC clears big four Australian banks to prepare a jointly owned commercial cash pool
Cash distribution infrastructure - Interim authorisation granted 26 Jun 2026
The ACCC has given ANZ, CBA, NAB and Westpac interim clearance to take preparatory steps toward a jointly owned entity (JVCo) that would each hold a 25% stake in a shared national cash pool, eventually taking over commercial cash supply from Westpac alone. The regulator found the prep work itself would not lessen competition, though the banks still need separate approval before the venture can actually start operating.
Why it matters: Rival retail banks cooperating on shared cash-handling infrastructure signals how unprofitable and fragile physical cash distribution has become as volumes shrink — a dynamic NZ's own big banks and RBNZ cash-access consultation are grappling with in parallel.
Source: The National Tribune, Mirage News
[MEDIUM] RBA opens wide-ranging review of payments regulation, putting BNPL fees and mobile wallets on the table
Payments regulation - Issues paper released 25 Jun 2026; submissions close 7 Aug 2026
The Reserve Bank of Australia has published an issues paper for a broad Review of Payments System Regulation, asking stakeholders which issues it should prioritise across mobile wallets (Apple Pay/Google Pay now near 45% of card payments by number), three-party card schemes and BNPL merchant fees, which it flags as materially higher than standard card fees. Priorities will be set by year-end, with formal consultation on the winners to follow from mid-2027.
Why it matters: This is the venue where Australia will likely decide whether to cap BNPL merchant fees the way it has capped card surcharges — a template NZ's ComCom, mid-consultation on its own commercial card interchange caps, will be watching closely for cross-Tasman alignment or divergence.
Source: Reserve Bank of Australia, FinTech Futures
Fraud & scams
Customer-impacting fraud, scam typologies and the liability landscape — NZ-first, with global threat signals.
[MEDIUM] ASIC warns AI-powered 'pump and dump' scams are surging, targeting older Australians
Investment scams / deepfakes - 16-17 Jul 2026
ASIC says reports of pump-and-dump share scams have surged, with 16 Australians losing over A$2.7m in just two weeks; scammers are using deepfake videos and fake celebrity endorsements (including of finance commentator Scott 'Barefoot Investor' Pape) to push victims into buying real shares on legitimate exchanges before dumping the price. The regulator says older Australians nearing retirement appear to be deliberately targeted, and flags AI as materially lowering the cost of producing convincing fake endorsements.
Why it matters: Because funds move into genuine brokerage accounts rather than direct transfers to fraudsters, this typology sits outside standard payment-fraud detection and reimbursement frameworks, complicating liability questions for banks and brokers as AI-generated endorsements become harder to distinguish from real ones.
[MEDIUM] Third man charged in A$600,000 online-banking scam targeting elderly Sydney victim
Elder financial exploitation - 16 Jul 2026
NSW Police's Strike Force Borlase arrested a third suspect over an alleged year-long scheme in which two men allegedly gained an 88-year-old man's online banking and credit card access and spent more than A$600,000, including on share purchases and transfers to themselves; two others were charged earlier in the week with obtaining financial advantage by deception.
Why it matters: A case study in third-party account-access exploitation of vulnerable/elderly customers — a typology banks' vulnerability-detection and transaction-monitoring controls are increasingly expected to catch before losses compound over months.
Source: Mirage News
[MONITOR] Two men charged after vulnerable Bay of Plenty victim manipulated into cash-withdrawal scam
Impersonation / vulnerable-victim scams - 16 Jul 2026
New Zealand Police have charged two men with obtaining by deception after a vulnerable Bay of Plenty man was allegedly manipulated into withdrawing cash from his bank account and handing it to the pair; police say further charges are possible and are urging victims to contact both Police (105) and their bank immediately to improve fund-recovery odds.
Why it matters: Cash-withdrawal coercion scams sit outside electronic-payment fraud controls entirely, reinforcing why NZ banks' front-line staff training and branch-level intervention prompts remain a key mitigation layer alongside digital fraud detection.
Emerging risks & trends
Slower-burning structural risks and trends worth getting ahead of — technology, resilience and governance.
[HIGH] EU delays AI Act 'high-risk' rules for bank credit and AML systems by 16 months
AI governance - Provisional deal reached 7 May 2026; formal adoption expected before 2 Aug 2026
EU negotiators have provisionally agreed, via the Digital Omnibus, to push back the AI Act's high-risk compliance deadline for standalone systems — including bank credit-scoring, AML and underwriting models — from 2 August 2026 to 2 December 2027, with product-embedded high-risk systems deferred further to 2 August 2028. Formal publication in the Official Journal is expected before the original deadline lapses.
Why it matters: Banks and fintechs building EU-facing AI credit and compliance tools get significant runway relief, but the shifting timeline complicates global model-governance roadmaps and raises the risk that groups with EU operations miscalibrate compliance sequencing against other regimes moving in parallel (US Treasury FS AI RMF, RBI's draft kill-switch rules, FSB sound practices).
Source: Gibson Dunn, Pinsent Masons
[MEDIUM] EBA folds climate risk into EU bank stress tests for the first time
Climate risk - Draft methodology published 11 Jun 2026; consultation closed 10 Jul 2026
The European Banking Authority's draft methodology for the 2027 EU-wide stress test adds, for the first time, a dedicated climate module testing banks against combined flood and abrupt climate-policy-shift scenarios over a three-year horizon, while cutting overall required data points by roughly 55% versus the prior exercise. Around 63 banks across the EU and Norway, covering about 75% of EU banking assets, will take part; climate results will not yet feed into core capital outcomes.
Why it matters: This is among the first times a major systemic stress test formally quantifies climate exposure at scale, previewing how climate scenario analysis could eventually flow into capital requirements — a template worth watching as RBNZ and APRA build out their own climate-risk expectations for banks with cross-border exposure.
Source: European Banking Authority, ESG Today
[MEDIUM] European ransomware attacks jump 55% as supply-chain routes become the main entry point
Cyber threats / operational resilience - Report released 25 Jun 2026, covering Jan 2025-Apr 2026
Cyber-risk rating firm Black Kite's first Europe-focused threat report found ransomware incidents across 31 European countries rose 55% year-on-year in early 2026, with the UK the second most-targeted country after Germany and IT service providers the single most-targeted subindustry, as attackers increasingly breach one shared supplier to reach many downstream clients. Groups Qilin, Akira and SafePay drove much of the surge, with Qilin active across 26 of the 31 countries studied.
Why it matters: The pattern of attackers hitting shared IT and managed-service providers rather than individual firms is exactly the third-party concentration risk regulators are now formally supervising through the UK's Critical Third Parties regime and APRA's CPS 230; NZ banks and their outsourced IT/cloud suppliers sit inside the same exposure chain.
Source: PR Newswire, Help Net Security