The FPC's July warning: leverage, AI concentration, and a thinner margin for error
The Bank of England's Financial Policy Committee has flagged a sharper build-up of vulnerabilities across equity leverage, AI-driven market concentration, and cyber resilience, even as the UK system holds up. For senior leaders, the message is that the correlation of risks, not any single one, is what now demands board attention.
The Financial Policy Committee's July record does not announce a crisis. It does something more uncomfortable: it stacks the vulnerabilities it already named in December and tells the market they have become more entangled. Risky asset valuations, sovereign debt strains, private credit exposures, and a "substantial increase in the use of leverage in equity markets" now sit alongside a Middle East supply shock and rapid advances in frontier AI (Bank of England). The Committee's judgement is that the likelihood of these crystallising together has risen since December.
Leverage is quietly the headline
The FPC singles out a significant rise in hedge fund activity and increased equity leverage, at a point when global indices are being pulled upward by a narrow set of AI-related names (Bank of England). That combination, stretched valuations, concentrated exposures, and more borrowed money behind them, is the textbook setup for a disorderly unwind. Asset managers and prime brokers should read the record as a supervisory signal that margining practices, counterparty concentration, and non-bank leverage data will be probed more assertively in the second half of 2026. Boards that treated the December FSR as background reading no longer have that luxury.
AI has moved from opportunity to stability risk
The FPC explicitly links frontier AI advances to heightened cyber and operational resilience risk (Bank of England). That framing matters because it arrives days after the FCA's Mills Review set out how agentic AI will reshape retail financial services by 2030, with a fifth of UK adults, roughly 11 million people, already open to autonomous AI acting on their behalf (FCA). The prudential and conduct regulators are now converging on the same concern from opposite ends: the FCA on consumer trust and market power, the FPC on operational fragility and concentration in the infrastructure firms depend on. Executives running third-party risk, model governance, or cloud strategy should expect questions that assume both lenses apply simultaneously.
Conduct risk is not on holiday
While the FPC frames the macro picture, the FCA continues to press on the retail floor. Nine of the largest banks have been told to fix basic bank account provision after a mystery shop found a third of experiences rated poor or very poor, with firms pushing vulnerable customers toward unsuitable online journeys (FCA). Emad Aladhal, director of retail banking at the FCA, said the regulator will be "holding them to account to make sure change happens" (FCA). The Eldens Finance administration, announced 6 July, is a reminder that firm-level failure continues to land on customers holding pledged assets and on administrators managing orderly wind-down (FCA). Neither item is systemic. Both consume senior bandwidth precisely when macro-prudential attention is sharpening.
The implication
The operating assumption for the rest of 2026 should be that regulators expect firms to hold multiple risk narratives at once: leverage-driven market stress, AI-linked operational fragility, and conduct outcomes for the most exposed customers. Boards that force a single-issue agenda will be caught out. The firms that fare best will be those whose risk committees can articulate, in one sitting, how a disorderly equity unwind, a cloud or model outage, and a Consumer Duty failing would interact on their own balance sheet.
Sources
What this reveals
The FPC's July record exposes a governance problem that goes beyond any single risk category: boards have typically managed leverage, AI, cyber, and conduct as parallel workstreams with separate owners, dashboards and risk appetites, when the supervisory lens is now explicitly correlational. The failed assumption is that individually acceptable exposures remain acceptable in aggregate; leadership teams may still believe their December risk picture holds because no single metric has breached tolerance, while the entanglement between those metrics has changed underneath them. This matters beyond firms directly named because the FPC is signalling that second-half supervisory conversations will test whether boards can articulate how their risks move together, not just how each is controlled in isolation.
Questions accountable leaders should ask
- 01When did your board last review leverage, AI concentration, third-party dependency and conduct exposure in a single integrated paper, rather than as separate risk committee items?
- 02If a disorderly unwind in AI-related equities coincided with a cyber event at a shared infrastructure provider, would your existing scenario suite actually capture the correlated impact, or would each function model its own slice?
- 03Can you evidence, in board minutes, that you have tested the assumptions behind your December risk position against the specific vulnerabilities the FPC has now escalated?
- 04Who inside the firm owns the question of how prudential and conduct regulators' converging concerns about AI translate into a single, coherent governance response, rather than two parallel programmes?
- 05How confident are you that the read your executive gives the board on hedge fund counterparty exposure, non-bank leverage and margining practice reflects what a supervisor would find on inspection?
What accountable leaders should do now
- 1Commission a single integrated paper for the next risk committee that maps how leverage, AI concentration, cyber and conduct exposures interact in your specific book, rather than accepting the current siloed reporting.
- 2Re-open the assumptions register behind the last board-approved risk appetite and identify which assumptions the FPC's July escalation has weakened, flagging any that now require fresh evidence before the next supervisory engagement.
- 3Task second line with a targeted review of counterparty concentration, margining practice and non-bank leverage data, on the working assumption these will be probed more assertively in H2 2026, and surface gaps before supervisors do.
- 4Establish a joint prudential-conduct view on AI: one paper, one owner, covering model governance, third-party concentration, operational resilience and Consumer Duty implications, so the board is not receiving two disconnected narratives.
- 5Pressure-test the current board read of external stakeholder expectations against what regulators, counterparties and major clients are actually signalling, and record where internal confidence exceeds the external evidence base.
Explore the practical guide
This guide shows how to test whether your board's view of stakeholder priorities matches what regulators and adjacent decision-makers will actually demand during review. After reading, you will know how to structure that test, where assumptions typically break, and how to use the findings without undermining the board.
Read the guideWhere internal confidence may exceed external evidence
Polar Insight helps leadership teams test critical assumptions against stakeholder, market, regulatory, and operational reality before risk compounds.
Explore Stakeholder ProximityRelated insights
Critical Third Parties: the cloud comes inside the regulatory perimeter
From 13 July 2026, the Bank of England, PRA and FCA jointly oversee Amazon Web Services, Google Cloud, Microsoft and Oracle as designated Critical Third Parties. For boards, the concentration risk they have long acknowledged in strategy papers now has a formal supervisory counterpart, and it does not shift accountability off the regulated firm.
London FX hits record $4.6 trillion daily: what the surge means for wholesale strategy
The Bank of England's April 2026 turnover survey shows UK foreign exchange activity at a record $4,609 billion per day, up 20% in six months and 14% year on year. For bank treasurers, asset managers and market infrastructure providers, the numbers reset assumptions about London's post-Brexit standing and the operational demands of a swaps-heavy market.
Britain's regional capital bet: £100m for first-time VCs outside London
HM Treasury has committed a further £100 million through the British Business Bank's Investor Pathways Capital Initiative, backing up to 10 new venture capital funds run by first-time managers outside London. For senior leaders in asset management, banking and insurance, the move signals where public capital is steering private allocation, and where new deal flow will originate.
Stakeholder Signals
Consequential developments in financial services and other regulated markets, with one implication for accountable leaders.
