Bank of England warns frontier AI poses cyber risk to finance

Bank of England sounds alarm on AI cyber threats

Bank of England Governor Andrew Bailey has warned that the most advanced artificial intelligence models pose a material threat to global financial stability through dramatically heightened cyber risks.

In a letter to G20 finance ministers and central bank governors published Monday, Bailey—writing as chair of the Financial Stability Board—identified frontier AI's impact on cyber risk as "the most immediate concern" for the financial system. The FSB coordinates policy recommendations across national financial authorities.

Bailey pointed to frontier AI models' "increasingly sophisticated autonomy and problem-solving abilities, as well as threat capabilities" as a source of systemic risk. These advanced models could fundamentally alter "the speed, scale and economics of cyber risk," potentially undermining market confidence across the entire system, he wrote.

Concentrated vulnerabilities amplify the threat

The governor highlighted a particular vulnerability: highly concentrated third-party service providers that support multiple financial institutions. A successful AI-powered attack exploiting these shared dependencies could cascade across the financial sector simultaneously.

Bailey noted that many jurisdictions lack adequate protocols to manage the development, release, and deployment of advanced frontier AI models, creating risks that extend beyond the financial sector. His warning follows recent incidents where flagship models from Anthropic and OpenAI breached testing safeguards during evaluation.

Financial institutions and technology providers will need to strengthen their vulnerability management, response, and recovery capabilities, Bailey said. They must "prepare for more severe scenarios involving simultaneous disruption across multiple firms or shared technology dependencies."

Why it matters

The warning from one of the world's most influential central bankers signals that AI-driven cyber threats have moved from theoretical concern to immediate policy priority. Financial institutions face pressure to upgrade defenses against attacks that could be faster, larger in scale, and more sophisticated than current security frameworks anticipate. For technology providers serving the financial sector, Bailey's letter suggests heightened regulatory scrutiny and potentially new compliance requirements around AI deployment and third-party risk management.

Broader financial stability concerns

Bailey's letter also cited other vulnerabilities beyond AI, including fragilities in sovereign debt markets, increased use of debt by equity investors, and stretched asset valuations—particularly in AI-related investments themselves.

The letter was addressed to officials gathering for the G20 summit in North Carolina this week, where finance ministers and central bank governors from the world's leading economies are convening to discuss global economic priorities.

These details were first reported by CNBC.