Cloudbank Digest — RBNZ pencils two more hikes, OCR seen near 3% by year-end +17 more · 11 Jul
Cloudbank Digest — RBNZ pencils two more hikes, OCR seen near 3% by year-end +17 more · 11 Jul
RBNZ's July MPS pencils two more OCR hikes toward 3%; Swift's blockchain ledger goes live with 17 banks; UK begins hyperscaler oversight Monday.
Top 3 today
- [UPDATE] RBNZ's July MPS pencils two more hikes, OCR seen near 3% by year-end
- Swift goes live with a blockchain shared ledger for 24/7 tokenised bank-money transfers, 17 banks piloting
- UK begins formal oversight of Microsoft, Google, Amazon and Oracle as 'Critical Third Parties' to finance
Regulatory — NZ horizon & global signals
New Zealand first; global banking, finance & payments items included where there's an NZ read-across.
[HIGH] APRA opens capital rework proposing lighter risk weights for infrastructure and unrated corporate lending
Capital requirements - Consultation opened 29 Jun 2026 (workstream 1 of 3); intended effective date 1 Apr 2027
Australia's prudential regulator has proposed lower risk weights for large infrastructure loans, high-quality unrated corporate exposures and residential development lending, the first of three planned capital workstreams.
Why it matters: This puts APRA in the same lighter-touch camp as the US Basel III Endgame rewrite. Since NZ's big four banks are Australian-owned subsidiaries, any trans-Tasman capital divergence reopens the debate over whether RBNZ's more conservative settings leave local banks less competitive than their parents on lending economics.
Source: APRA
[MEDIUM] FMA sets 2026/27 conduct priorities in first report since gaining full credit-licensing mandate
Conduct regulation - Published early Jul 2026
The FMA's latest Financial Conduct Report sets four priorities for the year ahead: remuneration-driven conflicts, product design, use of complaints data, and fraud detection, while flagging AI's growing role in financial services as an emerging supervisory focus.
Why it matters: This is the FMA's first full-mandate priorities statement since absorbing consumer credit licensing. Banks should expect closer scrutiny of remuneration structures and complaints data, and the explicit AI mention signals AI governance is now on the conduct regulator's agenda too.
Source: Scoop / FMA
[MEDIUM] NZDD stablecoin's 'not a financial product' ruling draws fresh industry pushback over consumer protection gaps
Digital assets / stablecoin regulation - FMA designation effective 11 Mar 2026; industry pushback resurfaced late Jun 2026
The FMA classified NZDD, a bank-trust-backed NZD stablecoin, as a payment tool rather than a financial product, prompting the NZ Bankers Association to warn of gaps in consumer protection and deposit-guarantee coverage.
Why it matters: While the GENIUS Act, MiCA and the Open USD consortium are building licensed-issuer stablecoin regimes elsewhere, NZ has no bespoke stablecoin framework. This is the clearest local test case of the same deposit-vs-security-vs-payment-tool tension, and pressure on MBIE/RBNZ to close the gap will grow with local volumes.
Source: interest.co.nz
AI & automation — banking, payments & beyond
Focused on banking & payments, but includes cross-industry moves with read-across to financial institutions and their operations.
[HIGH] JPMorgan's AI investing agents beat a 60/40 portfolio across two decades of backtests
Agentic AI in asset allocation - Bloomberg, 9 Jul 2026
JPMorgan researchers built AI agents, powered by third-party foundation models, that shift equity/bond allocations across four classified market regimes. All eight tested agents beat both a traditional 60/40 portfolio and the bank's own rules-based model on a risk-adjusted basis in historical simulation.
Why it matters: This moves agentic AI from back-office ops (KYC, fraud) into live investment decision-making at a major bank, raising fresh model-risk and explainability questions just as regulators are already probing agentic decision-making in lending and trading — the same governance gap now extends into wealth and advice businesses NZ banks partner into.
Source: Bloomberg
[HIGH] AI-generated identities overtake physical forgery as the dominant bank fraud method, new data shows
AI-generated identity fraud - AU10TIX Q1 2026 report, released 9 Jul 2026
Identity-verification vendor AU10TIX's latest report found a 3.89% confirmed fraud rate across payments, banking and trading platforms, with AI-generated identities and synthetic documents now the leading fraud method, overtaking physical forgery, with confirmed fraud rising across every sub-sector.
Why it matters: This is a concrete, dated data point showing generative AI has already flipped fraud typology from physical forgery to synthetic identity — directly relevant to the onboarding and KYC automation NZ and AU banks are racing to deploy, which assumes documents are genuine.
Source: PR Newswire / AU10TIX
[MEDIUM] Banks are running three separate AI stacks, not one, industry benchmark finds
AI operating model / governance - nCino AI in Banking Benchmark, 1 Jul 2026
A survey of 150 senior US banking executives found 84% now run AI at enterprise scale, but as three distinct deployments — generative, predictive and agentic AI — each argued to need its own oversight model rather than one unified governance approach.
Why it matters: This explains why AI model governance keeps topping the list of scaling barriers: practitioners say gen-AI, predictive and agentic AI need three different control frameworks, not one — a useful framing for NZ risk and compliance teams scoping their own AI governance uplift.
Source: fintech.global
Payments innovation & digital assets
[HIGH] Swift goes live with a blockchain shared ledger for 24/7 tokenised bank-money transfers, 17 banks piloting
Payments infrastructure / tokenisation - Live 8-9 Jul 2026, pilot with 17 global banks
Swift has activated a blockchain-based shared ledger letting banks across six continents — including Citi, HSBC, UBS, BNP Paribas, Standard Chartered, Wells Fargo, BNY, DBS and MUFG — move tokenised deposits between themselves around the clock, with final settlement still routed through existing rails as an orchestration layer rather than a replacement for Swift messaging.
Why it matters: This is a direct competitive response to stablecoin rails such as Open USD and AUDC, putting Swift's own infrastructure behind tokenised bank money for the first time. NZ banks are heavily Swift-dependent correspondent-banking users, so this shapes the future shape of the cross-border rails they will eventually plug into.
[HIGH] UK's FCA finalises Buy Now Pay Later rules, full regime goes live 15 July
BNPL regulation - Rules finalised; full regime effective 15 Jul 2026
The UK FCA has published final rules bringing BNPL providers under its regulatory perimeter from 15 July, mandating affordability checks, upfront cost disclosures and Consumer Duty protections, with a temporary permissions regime for existing providers seeking full authorisation.
Why it matters: This closes a long-standing UK regulatory gap and offers a template NZ regulators may watch as they weigh whether to bring local BNPL providers under consumer credit law, following Australia's own CDR/BNPL expansion this month.
Source: Hogan Lovells, FCA
[MEDIUM] European Parliament backs digital euro legislation, trilogue negotiations begin 13 July
CBDC / digital euro - Parliament vote 9 Jul 2026; trilogue starts 13 Jul 2026
MEPs voted 416-169 to advance the digital euro framework into final three-way negotiations between Parliament, Council and Commission, with officials aiming to finalise terms by year-end ahead of a planned 2027 pilot and possible 2029 issuance.
Why it matters: The eurozone's retail CBDC has crossed its most significant legislative hurdle to date, reviving the push to reduce reliance on US-dominated payment rails — a theme that will feed into RBNZ's own digital cash cost-benefit work due later this year.
Source: Euronews
Banking & finance — macro
[HIGH] [UPDATE] RBNZ's July MPS pencils two more hikes, OCR seen near 3% by year-end
OCR path / inflation forecast - RBNZ Monetary Policy Statement, 8 Jul 2026
New detail from RBNZ's own Monetary Policy Statement shows annual inflation projected to peak near 3.9% in the June quarter before easing to about 3.3% by September, with the Bank's rate track implying two further 25bp hikes in September and December, taking the OCR to around 3.00%.
Why it matters: This gives banks a firmer numerical anchor for repricing term deposits and fixed mortgage curves out to Q4, rather than just a qualitative signal that more hikes are coming.
Source: RBNZ
[MEDIUM] [UPDATE] NZ manufacturing hits five-year high, extends NZD rally to three-week high
NZD / activity data - BNZ-BusinessNZ PMI for June, released 9 Jul 2026
The BNZ-BusinessNZ Performance of Manufacturing Index jumped to 59.7 in June from 51.3 in May, its strongest reading since 2021, pushing NZD/USD to around /bin/bash.573, its best level in almost three weeks.
Why it matters: A genuine activity upturn alongside the OCR hike strengthens the case for RBNZ's tightening bias and reduces the odds of an early pause — relevant for business lending demand and NZD-priced import costs.
Source: Bloomberg
[MEDIUM] RBA holds cash rate at 4.35%, citing oil-shock uncertainty
RBA policy - RBA Board decision, Jul 2026
The RBA left its cash rate unchanged at 4.35% after three hikes this year tied to the Iran-driven energy shock, saying it wants to assess the impact of prior increases and ongoing oil-supply disruption before moving again.
Why it matters: A steady-but-watchful RBA alongside a hiking RBNZ narrows the trans-Tasman policy gap, a factor for AUD/NZD cross-flows and for the Australian-owned major banks' funding and pricing decisions in NZ.
Source: RBA
[HIGH] [UPDATE] Oil holds above 3 as Kharg Island threat keeps a bid under crude
Oil / Middle East risk premium - 9-10 Jul 2026
Brent held near 5.50/bbl, on track for a roughly 4.7% weekly gain, as the risk premium is sustained by a US threat to strike or seize Iran's Kharg Island export terminal after declaring the earlier ceasefire over.
Why it matters: Sustained above-0 oil keeps upside risk in RBNZ's inflation track and reinforces the case for further OCR hikes rather than an early pause — a live input for bank economists' forecast updates.
Source: Al Jazeera, Fortune
Competitor watch — NZ, Australia & global
Existing and emerging players across NZ and Australia, plus global names where they're relevant to NZ/AU banking.
[MONITOR] Nubank's Mexican unit wins full banking licence, must launch within 30 days
Global neobank scale-up - CNBV authorisation, 9-10 Jul 2026; must launch within 30 days
Nu Holdings' Mexican subsidiary received formal authorisation from Mexico's banking regulator to operate as a full bank, with a 30-day window to begin operations including payroll and deposit accounts.
Why it matters: Converting a large underbanked customer base into a fully licensed deposit-taker is the same playbook Revolut and Wise are chasing in Australia and NZ — a live data point on how fast a neobank can move from e-money/credit licences to full banking status at scale.
Source: Bloomberg
Emerging risks & trends
Slower-burning structural risks and trends worth getting ahead of — technology, resilience and governance.
[HIGH] UK begins formal oversight of Microsoft, Google, Amazon and Oracle as 'Critical Third Parties' to finance
Cloud concentration risk (regulatory tightening) - Oversight regime takes effect Monday 13 Jul 2026
The Bank of England, PRA and FCA will jointly start supervising AWS EMEA, Google Cloud EMEA, Microsoft Ireland and Oracle UK as designated critical third parties, following formal designation by HM Treasury. The providers must undergo resilience testing, run self-assessments and report major incidents to regulators.
Why it matters: This is the sharpest regulatory move yet on cloud concentration risk, and cuts against Australia's APRA, which just eased its own cloud/third-party rules under CPS 230 — global supervisors are diverging on how hard to lean on hyperscalers. NZ banks running on the same four providers should expect this regime to become a reference model in future RBNZ outsourcing-policy consultations.
Source: Bank of England
[MEDIUM] Avaloq SaaS outage disrupts roughly 21 banks and wealth managers for days
Third-party/cloud concentration risk crystallising - Outage began 2 Jul 2026, resolution ongoing through the week
A hardware failure at a data-centre subcontractor knocked out Avaloq's SaaS trading services, forcing affected banks to place orders with brokers by phone while their (locally run) core banking systems stayed unaffected; roughly 21 client institutions were hit.
Why it matters: Avaloq is a major core-banking/wealth-management vendor used widely across Europe, the Gulf and Asia-Pacific. A multi-day SaaS outage triggered by one subcontractor is a live illustration of exactly the concentration risk that UK, EU and (soon) NZ resilience regimes are trying to force banks to plan around.
Source: finews.com
[MEDIUM] Deutsche Bank probes ransomware gang's claim of a third-party breach exposing employee data
Third-party cyber risk / DORA incident-reporting test - Breach claim posted 4 Jul 2026; investigation ongoing
A ransomware group posted employee emails, password hashes and internal records it says came from Deutsche Bank, but the bank says the compromise sits with an external German supplier running a sales-partner incentive platform, not its own network.
Why it matters: This is effectively a live-fire test of DORA's third-party incident-reporting regime — whether vendor breaches get flagged to regulators before they hit leak sites will shape how supervisors judge banks' vendor oversight going forward.
Source: Cybernews
[MEDIUM] EU regulators add extreme-heat losses as a new stress-test category for banks
Climate risk in stress testing (new physical-risk category) - EBA scoping work reported 7 Jul 2026, ahead of the 2027 EU-wide stress test
The European Banking Authority is working out how to quantify extreme-heat losses for banks, potentially making heat a distinct stress-test category alongside the flood scenario already built into its draft 2027 EU-wide stress test methodology.
Why it matters: This is a different mechanism from the ECB's collateral-discounting move already flagged — it's the first time heat-specific physical risk would sit inside the core EU supervisory stress-test framework, widening the range of climate variables banks must model.
Source: Insurance Journal