The Reserve Bank of India (RBI) has stated that artificial intelligence (AI) is not only enhancing the efficiency of banks but also posing serious risks to the country’s financial infrastructure. In its Financial Stability Report (FSR) published in June 2026, the RBI categorises AI-driven cyber threats as the foremost emerging danger for banking and financial sectors. The rapid adoption of AI is seen as escalating operational, cybersecurity, and systemic vulnerabilities, prompting a need for financial entities to revamp their defensive strategies.

This warning comes at a time when global financial institutions are eager to implement generative AI technology for various functions, including customer service, lending assessments, and fraud detection. Concurrently, cybercriminals are leveraging the same advancements to execute more sophisticated attacks on financial systems, further complicating the landscape.

According to the report, a survey conducted among regulated financial entities revealed that when asked to identify cyber risks for the upcoming year, respondents placed AI-driven threats at the top of the list. This finding underscores a growing concern about the potential for such technologies to enhance the complexity and scale of cyber incidents.

Financial Institutions Increasing Cybersecurity Investments

In response to the mounting threats, financial institutions are ramping up their expenditures and human resources dedicated to cybersecurity. The RBI’s findings indicate that approximately 67 per cent of the surveyed entities increased their IT and cybersecurity personnel between March 2025 and March 2026. Additionally, 71 per cent reported escalating their cybersecurity budgets as a portion of overall IT spending in recent financial years.

The central bank noted that international spending benchmarks could guide institutions in fortifying their digital defence mechanisms. As the risk landscape evolves, the necessity for financial institutions to enhance their cybersecurity frameworks is becoming increasingly critical.

Despite the investments, many institutions reported that their readiness to address AI-related cyber risks remains in a developmental phase. A substantial number described their preparedness as still being either “Developing” or “Intermediate,” revealing a significant gap in the sector’s ability to combat these emerging threats effectively.

Global Regulatory Developments on AI Management

Regulatory bodies worldwide have begun reassessing their stance on AI, shifting from viewing it purely as a tool for innovation to recognising it as a source of potential risks. The RBI report highlights that the Financial Stability Board (FSB) has introduced a dedicated workstream focusing on AI in its 2026 programme, aimed at formulating best practices for financial institutions adopting AI technologies.

Furthermore, the International Organization of Securities Commissions (IOSCO) has published an AI Supervisory Toolkit. This framework encompasses aspects such as governance, third-party risk management, and necessary disclosures. The Organisation for Economic Co-operation and Development (OECD) has also provided guidance on supervising AI adoption across various financial sectors.

These developments indicate a noticeable transition from abstract principles relating to AI to concrete supervisory frameworks that require financial institutions to adopt best practices for risk mitigation.

Concerns Over AI Dependencies and Frameworks

The RBI has expressed concerns that the risks associated with AI extend beyond mere cybersecurity threats. Key issues highlighted include the challenge of validating AI models, deficiencies in data governance, and the potential for concentration risks linked to reliance on a limited number of AI service providers. The report warns that if financial entities depend on identical AI solutions or cloud services, a disruption at one provider could lead to extensive repercussions across the entire financial sector.

The report also points out that advanced AI technologies might inadvertently introduce operational risks, disrupt essential services, and compromise confidential customer data, thereby undermining public trust in the banking system.

In light of recent global cyber incidents, such as the alleged “Mythos” ransomware campaign, the RBI emphasises the importance of enhanced AI governance and the establishment of robust cyber resilience and risk management frameworks within the financial sector to safeguard against these emerging threats.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store –  https://apps.apple.com/in/app/newspin/id6746449540 

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share