Why cyber resilience matters to banks
The integrity of banking networks and the trust of customers are the foundation of banking in a digital economy. Banks increasingly deliver services through partnerships with multiple ICT providers, creating an expanding supply chain of third parties. This interconnected landscape means that cybersecurity threats span borders and require coordinated responses.
Banks cannot address cyber resilience alone. The inherently cross-border nature of digital services demands a harmonised pan-European regulatory framework that sets consistent security standards across jurisdictions while enabling innovation. Public-private cooperation is essential to this effort. By strengthening information sharing on cyber threats, raising awareness among employees and customers, and aligning on common standards, banks and other stakeholders can build collective resilience to protect the financial system and maintain the trust that underpins banking.
EBF’s strategy on the digital transformation of banks comprises a number of workstreams; underlying them all is Cybersecurity
The main objective of EBF’s work on Cybersecurity is to safeguard the integrity of banking networks and the trust of customers.
EBF’s actions to achieve this objective include:
Contribution to shaping a European legislative, regulatory & supervisory environment that is more harmonized and conducive to the fight against cybercrime
Promotion of initiatives to facilitate information sharing on cyber threats
Activities to raise awareness on cybersecurity issues and to enhance cybersecurity skills for bank employees and customers
EBF position on the European Commission’s DORA proposal (2020)
The adoption of innovative technology by European banks requires a balance between a reliable and consistent framework of financial regulation and flexibility to adapt to changing business models. The inherently cross-border nature of digital service solutions needs to be addressed by banks, regulators, and digital service providers on common ground, looking for the secure facilitation of financial service innovation across Europe. An appropriate and harmonized pan-European legal framework is key to facilitate the adoption of innovative technology.
Consequently, the EBF welcomes the European Commission’s aim to enhance operational resilience in Europe. The financial industry’s own considerations will benefit from more harmonized ICT-related rules at the European level, aligned with the existing supervisory framework today. Detrimental fragmentation of the regulatory framework should be avoided, addressing risks consistently and proportionately across European jurisdictions without hampering the financial industry’s ability to apply innovative services.
With this position paper, the EBF addresses the proposal for a Regulation on digital operational resilience for the financial sector, as published by the Commission in September 2020.
EBF engagement at the Global Fraud Summit 2026
The European Banking Federation represented the European banking sector at the Global Fraud Summit 2026 in Vienna. Joining high-level representatives from governments, law enforcement, and international bodies like UNODC and INTERPOL, the EBF actively contributed to the summit’s landmark Call to Action on Combating Fraud. Our participation underscored the banking industry’s commitment to shifting from fragmented national responses to a unified, international strategy, emphasising the need of an ecosystem approach where telcos and online platforms become an active part of the fight against fraud. By sharing our expertise, we helped to shape a global agenda focused on cross-sectoral cooperation to disrupt criminal networks and protect the integrity of the digital economy.
Endorsing the Global PPP Framework & The Whole-of-Ecosystem Approach
EBF is among the 83 organisations endorsing the Summit’s outcome documents, including the Call to Action on Combating Fraud and the Global Public Private Partnership Framework against Fraud. As the digital and fraud landscape evolves, tackling fraud requires a shift from reactive responses to a whole ecosystem approach. Strengthening cooperation between banks, technology companies, authorities and other stakeholders will be essential to better prevent, detect and disrupt fraud.
EU initiatives
Financial services – improving resilience against cyberattacks
Digital Single Market – Cybersecurity
EU Cybersecurity Package
Cybersecurity Act: Adopted text
Fintech Action Plan: For a more competitive and innovative European financial sector
ECB publishes European framework for testing financial sector resilience to cyber attacks
Euro Cyber Resilience Board for pan-European Financial Infrastructures
Public consultation on cyber resilience oversight expectations
EBA publishes its Roadmap on FinTech
EBF key messages to the EBA consultation on its draft Guidelines on ICT and security risk management
Critical infrastructures and services
European FI-ISAC
Cyber exercises
Cybersecurity standards and certification
European Cyber Security Month
International initiatives
FSB Cyber Incident Response and Recovery Report
EBF response to the FSB public consultation on Cyber Lexicon
Paris Call official website
EBF supports Paris Call for Trust and Security in Cyberspace
Key EBF positions
Cybersecurity awareness raising campaigns
EC3-EBF CyberScams campaign
Cybercriminals are constantly looking for ways to make money at your expense. Individuals and organisations often fall prey to frauds that involve various forms of social engineering techniques, where the information required is garnered from a person rather than breaking into a system.
These scams are typical examples of how cyber attackers can easily play on people’s psychology and perceptions. The tips provided here are aimed to help you protect yourself. Awareness is your best defence! Learn more
No More Ransom campaign
Skills and awareness in the digital space are essential also for personal security. The EBF Digital Skills strategy is therefore very closely linked with its work on cybersecurity. EBF has joined forces with Europol EC3, the European Cybercrime Center of the EU Agency for Law Enforcement Cooperation, promoting awareness on digital security and cybercrime. EBF is also regularly supporting the European Cybersecurity Month, organised by ENISA every year in October.
Don’t be a mule campaign
- Europol EC3, FinTech FinCrime Exchange, INTERPOL and Western Union 422 arrested and 4,031 money mules identified in global crackdown on money laundering
- Europol EC3, EBF, Eurojus Joint Press release: More than 650 banks support global action against money laundering
- Europol EC3, EBF, Eurojus Joint Press release: Over 1500 money mules identified in worldwide money laundering sting
- Europol EC3 – EBF awareness campaign on Cyberscams: Take control of your digital life!
- Press release: Europol & EBF launch campaign on 7 most common online financial scams
- Europol – awareness and prevention guides
- Press release: Europol & EBF join forces to fight cybercrime
Past events
EBF DIGITAL THURSDAYS 2021-Cyber resilience in Banking: Regulation, Synergies and Trust
Security is the cornerstone of successful digital transformation, especially in banking where trust lies at the heart of the relationship with customers. European banks drive their digital innovation in cooperation with multiple ICT service providers, composing an all-growing supply chain of third parties. Bank and non-bank actors in the chain, regulatory and supervisory authorities are striving for a high level of resilience and cybersecurity across the ecosystem.
As the EU legislator proposes a harmonized approach to operational resilience under the Digital Operational Resilience Act (DORA), regulators and industry discussed this advancing initiative and its effect on digital innovation. Taking place within the European Cybersecurity Month, this Digital Thursday showcased also the importance of cyber threat information sharing and other private sector initiatives, including raising awareness on cyber risks.
EBF DIGITAL THURSDAYS 2020 - Cyber security & resilience: The basis of it all in digital innovation
The first day of EBF's Innovation & Cyber Thursdays 2020 was devoted to cybersecurity and resilience, the foundation underlying every field of digital innovation. Held during European Cyber Security Month and building on previous editions of the EBF Cybersecurity Conference, the event explored the rapidly evolving cyber trends and challenges facing banks. Lessons learned from the Covid-19 pandemic, which accelerated digitalisation across the economy, and its impact on the resilience of the banking sector were a key focus, alongside new EU legislative developments and international initiatives on digital operational resilience for financial institutions. Policy-makers, bank experts and international stakeholders also shared insights on European and international priorities for facilitating efficient, timely cyber information-sharing among market participants — an important tool for identifying and mitigating cyber threats.
