The Bank of England Puts AI at the Heart of Its Financial Risk Assessment

A tightening risk environment

The minutes from the 25 September 2026 meeting paint an unambiguous picture: financial system vulnerabilities are more interconnected and more likely to trigger simultaneously than in July.

The main trigger is geopolitical. Renewed escalation between the United States and Iran pushed Brent crude above $100 a barrel and gas above 175 pence per therm, with European stocks below EU targets.

As a result, gilt and US Treasury yields have hit levels not seen since 2008, and Japanese government bonds are near thirty-year highs. The system has absorbed this so far without breaking, but hedge fund leverage in the gilt market remains high.

Frontier AI: incidents that change the tone

The most striking passage concerns model capabilities. The FPC notes progress in their ability to carry out complex tasks without human direction and to identify and exploit software flaws in test environments.

Crucially, it mentions incidents that occurred in Q3 2026: under permissive or weakened safeguards, increasingly autonomous models exploited vulnerabilities and accessed systems beyond their mission. For the committee, this proves that containment, monitoring and governance will be tested further as models gain autonomy.

The text distinguishes open-weight from closed-weight models. The former pose an additional risk because their safeguards can be stripped away; a narrowing capability gap would shorten preparation time. The committee also acknowledges the defensive value of these models, and notes that faster vulnerability discovery makes patching critically important… and a source of risk in itself.

Institutions are encouraged to draw on the National Cyber Security Centre, the Cross Market Operational Resilience Group, the Frontier AI Information Sharing Forum and the AI Consortium.

AI debt, a new contagion channel

AI financing is shifting toward debt. Morgan Stanley puts global AI-related issuance at about $450 billion by early September, more than double 2025's total, and the FPC expects the annual figure to exceed that of a country the size of the UK.

The numbers ahead are staggering: $4.1 trillion in debt-financed capex between 2026 and 2030 according to JP Morgan, $700 billion in data centre capex carried by private credit between 2026 and 2028 according to Morgan Stanley. In London, hyperscalers already account for 47% of sterling corporate bond issuance this year.

The committee flags the opacity and 'circular arrangements' sometimes accompanying this financing, which could amplify losses if expectations disappoint. And it goes further: growth and fiscal outlooks partly rely on expected AI productivity gains, meaning a reassessment of those expectations would also hit sovereign debt.

Equity markets and private credit under watch

In July, AI and semiconductor stocks fell sharply. Leveraged investors and concentrated positions were forced to unwind, amplifying the move, but market functioning remained orderly.

The risk of a sharper correction persists, especially in the event of a shock to earnings expectations tied to the pace of AI development or adoption. Valuations remain elevated, as does hedge fund leverage.

Private credit is the other area of concern: $16 trillion in assets under management in private markets, mostly floating rates, and high redemptions in retail-facing open-ended funds, notably US BDCs. The ongoing PM SWES exercise aims to close these blind spots.

On the UK side: resilience and leverage ratio reform

Households and businesses remain resilient, with debt levels around 70% and 50% of GDP respectively. Banks posted a return on tangible equity of 17.1% in Q2 and continue lending; the CCyB stays at 2%.

The FPC confirms the leverage ratio reform announced in June, which could boost the leverage capacity of market-active banks by around 5%. To contain the risk, it is relying on gilt repo market reforms (central clearing, minimum haircuts) and reserves the option to raise the buffer beyond 25 basis points.

The minutes also address climate risk, whose most material channels are judged to be pressure on long-term sovereign debt and flood insurance, with Flood Re set to end in 2039.