The ECB imposed €12.18 million in penalties on J.P. Morgan SE on 19 February 2026 for misreporting risk-weighted assets (RWAs) from 2019-2024 due to misclassification of corporate exposures (15 quarters) and improper exclusion of transactions in credit valuation adjustment (CVA) risk calculations (21 quarters), both attributed to serious negligence and internal control failures. This enforcement action underscores the ECB's focus on accurate prudential reporting, as underreported RWAs led to overstated capital ratios, distorting supervisory oversight of the bank's risk profile and capital adequacy. Compliance teams must prioritize RWA calculation integrity to avoid similar "severe" and "moderately severe" sanctions under the ECB's penalty guide.
What Changed
This is an enforcement action, not a new rule change, but it reinforces existing requirements under the Capital Requirements Regulation (CRR) for accurate RWA calculations, including proper classification of corporate exposures for credit risk and inclusion of all relevant transactions in CVA risk (which measures counterparty default risk in derivatives). The ECB applied its Guide to the method of setting administrative pecuniary penalties, categorizing breaches as "severe" (credit risk) and "moderately severe" (CVA risk), based on duration, negligence, and impact on supervisory transparency.
Suggested Considerations
- Conduct immediate RWA process reviews: Audit corporate exposure classifications and CVA calculations for misreporting risks, ensuring compliance with CRR risk weights.
- Strengthen internal controls: Implement robust validation mechanisms to detect errors timely, addressing "serious negligence" gaps highlighted by ECB.
- Enhance reporting accuracy: Recalibrate models and data inputs for quarterly ECB submissions; test for overstatement of capital ratios via underreported RWAs.
- Monitor ECB sanctions page (https://www.bankingsupervision.europa.eu/banking/supervisory-sanctions/html/index.en.html) for updates and self-assess against penalty guide severity categories.
- J.P. Morgan specifically: Pay €12.18 million and consider legal challenge under Article 263 TFEU.
Key Dates
2024; - Period of breaches: 15 quarters of corporate exposure misclassification and 21 quarters of CVA transaction exclusions
- ECB publishes decision imposing €12.18 million penalties on J.P. Morgan SE
- Deadline for J.P. Morgan to challenge the decision before the Court of Justice of the European Union (typically 2 months from notification)
Compliance Impact
Urgency: High – This recent (published yesterday) ECB action against a major global bank signals intensified enforcement on RWA reporting, with penalties scaling by breach severity and duration; firms with derivatives or corporate lending books face elevated remediation pressure to prevent distorted capital views and fines up to "extremely severe" levels. It matters because RWAs directly underpin capital requirements, and control failures erode supervisory trust, potentially triggering broader SSM investigations.