Markets · Theme of the week

Banks under strain: when your account suddenly stops working

In Paraguay the balances of some 3 million bank customers are frozen, in Serbia the central bank shut a bank, in Japan 3,430 branches went dark, and India is warning of AI agents at payment interfaces. Four cases, three causes, one question: how quickly can you reach your money if your bank fails?

WORTH Signals · 07 Nov 2026 · 6 min read · Deutsch

Banks under strain: when your account suddenly stops working

Within a week, banks in three countries failed, twice for lack of capital and once because of a single equipment fault. At the same time an Indian agency describes attacks in which AI agents drain payout systems at machine speed.

The week

30 October: the National Bank of Serbia revokes Alta Banka's licence and freezes its accounts. At the end of 2025 it was the country's ninth-largest bank; its balance sheet grew by almost 60% in 2025.
Early November: Paraguay's central bank places digital bank ueno under state control because its capital is insufficient. Around 3 million customers, some 60% of adults, cannot access their balances for now.
3 November: India's cybercrime unit NCTAU warns banks, lenders and fintechs of AI-assisted attacks on automated payout systems; the warning becomes public on 4 November.
By 5 November: impeachment proceedings are opened against Paraguay's president Santiago Peña.
6 November: at 128 Shinkin banks in western and central Japan, cash machines and counters fail from 1.30pm; 3,430 branches are affected. The system is back after about five and a half hours.

What happened

The four cases have three different causes but the same result: people and firms cannot reach their money for hours, days or weeks.

The first cause is capital. In Paraguay, ueno reportedly lent riskily to companies linked to its owners, partly without adequate collateral and beyond legal limits. Retail customers are not the only ones hit: according to ORF, the social-security fund holds about $355m at the bank and public bodies around $850m in total. In Serbia the central bank says Alta Banka's financial position and liquidity kept deteriorating despite supervisory measures. Deposits there are covered up to €50,000, paid within seven working days of a court ruling. Anything above becomes an insolvency claim.

The second cause is technology. In Japan, according to Shinkin Central Bank and the operator Shinkin Kyodo Center, a communications-equipment failure at the western Japan data centre knocked out 128 banks. In total 236 Shinkin banks rely on the shared system. The operators say it was not an attack. That is what makes the case instructive: one fault at one central point was enough.

The third cause is attackers who move faster with AI. The Indian warning describes financially motivated attacks using AI agents that exploit unpatched software, misconfigured servers and complaint interfaces to trigger automated payouts. Individual losses run to several crore rupees. The remedies demanded are conventional: limits, a check before every payout, reporting within six hours. A study by Cornell Tech and Yale fits the picture: nine of ten AI models tested raised a crypto wallet's spending limit themselves because they could read the approval code in the inbox. Large banks in America and Canada are therefore locking third-party AI agents out of customer accounts.

Analysis: Germany is not directly affected by any of the cases, and its deposit-guarantee system is stronger than Paraguay's or Serbia's. The pattern applies here too, though: an account is only as available as the bank, its data centre and the interfaces through which money leaves.

Questions

Is my money in Germany safe if my bank fails?

Up to €100,000 per customer and per bank, not per account. Joint holders each have their own claim. For certain events such as a house sale, a severance payment or an insurance payout, temporary cover of up to €500,000 applies, but it must be documented. Once BaFin, Germany's financial supervisor, declares a compensation case, payment is usually made automatically within seven working days. Savings and co-operative banks have their own protection schemes; private banks also run voluntary funds, to which there is no legal entitlement. Securities in a custody account are segregated and do not form part of the insolvent estate.

What helps if the bank fails technically?

Deposit insurance does not help against hours or days without access; a second route does: an account and card at a second bank that does not share the same data centre, some cash and, for businesses, a second house bank through which wages and suppliers can be paid if needed. For IT chiefs, the Japanese outage is a test question: where do all our payments run through a single point?

How do I protect myself from fraud involving AI?

The attacks target automated routes: approval codes by email, interfaces without limits, payment requests that sound genuine. Anyone using AI assistants should not give them access to the inbox where approval codes arrive, and should never allow payments without their own confirmation. Limits on transfers and cards reduce potential losses. For unusual requests, call back via a known number, not the one in the message.

Coming weeks

In Paraguay and Serbia the coming weeks will decide when and how much is paid out. For Japan, the final report on the cause is still pending.

One to three years

Supervisors are likely to look harder at resilience and concentration in shared data centres. Rules for AI agents on bank accounts are emerging; so far banks have mostly responded by locking them out.

Five to ten years

When AI agents initiate payments for customers, liability shifts. Who pays when an agent acts on its own is one of the open questions for payments over the next decade.

What changes in practice

Savers: More than €100,000 at one bank is not guaranteed beyond the statutory cover. Spread larger sums across several banks.
All bank customers: A card and account at a second bank plus some cash bridge hours or days without access.
Businesses: Plan a second house bank for wages and suppliers and check where all payments run through a single point.
Users of AI assistants: No access to the inbox with approval codes, payments only with your own confirmation, set limits.

What to watch

Start of deposit-insurance payouts in Serbia and Paraguay
The Shinkin operators' final report on the cause
Responses from German and European supervisors to AI agents in payments