Citigroup CEO Jane Fraser warns of rising cyber risks from AI

Jane Fraser has a two-word summary of what keeps bank executives up at night in 2026: artificial intelligence. The Citigroup CEO, speaking in a July interview with the South China Morning Post, laid out what has become the defining tension for financial institutions right now: the same technology powering next-generation banking is also powering next-generation fraud.

Fraser argued that banks must pour significant resources into fortifying their systems against AI-enabled threats, including fraud, money laundering, and cyberattacks, even as they simultaneously race to deploy AI across their own operations.

The two-front war banks didn’t see coming

A January 2026 survey of 252 financial sector leaders found that AI-enhanced social engineering had become the top cybersecurity concern in the industry, registering a 16 percentage point jump compared to prior assessments. Social engineering attacks, where bad actors manipulate people into handing over credentials or access, become dramatically more convincing when AI can mimic voices, clone writing styles, and personalize phishing attempts at industrial volume.

Citigroup has deployed AI tools across roughly 180,000 employees globally, using the technology for fraud detection, risk management, and operational efficiency.

Fraser also acknowledged that the technology will displace some jobs while creating others, though she framed it as a net evolution rather than a catastrophe.

$8.9 trillion and counting

In March 2026, Citi raised its global AI capital expenditure forecast for the 2026 through 2030 period to $8.9 trillion, up from a prior estimate of $8 trillion. That revision reflects how quickly enterprise adoption is accelerating and how fast autonomous AI systems are moving from pilot programs to core infrastructure.

What this means for banks, tech investors, and the regulatory conversation

Fraser’s comments carry weight beyond Citigroup’s own strategy. When one of Wall Street’s most prominent CEOs publicly flags AI-driven cyber risk as a systemic concern, it tends to accelerate conversations that were already happening quietly in boardrooms and regulatory offices.

Financial regulators in the US, EU, and Asia have been sharpening their focus on AI-related risks inside systemically important banks. Fraser’s public acknowledgment of the threat landscape gives regulators additional cover to push for more rigorous AI risk disclosures and stress-testing frameworks.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.