Case Study: ECB's Record €12.18 Million Fine on J. P. Morgan SE (2026) by D. Roche

 

 

Overview

On 19 February 2026, the European Central Bank (ECB) announced two administrative penalties totalling €12.18 million on J.P. Morgan SE (the European subsidiary of JPMorgan Chase & Co.) for misreporting its risk-weighted assets (RWAs) between 2019 and 2024. The ECB stated that the misreporting led to understated RWAs and, as a result, higher reported capital ratios than should have been reported. (European Central Bank Banking Supervision, 2026)

The ECB attributed the breaches to serious negligence and deficiencies in internal processes and controls, including controls that did not detect the issues in a timely manner. (European Central Bank Banking Supervision, 2026)

What RWAs are and why they matter

RWAs are a risk-sensitive measure of a bank’s exposures. They are used as the denominator in key regulatory capital ratios and as the basis for calculating minimum capital requirements. In practice, higher-risk exposures carry higher risk weights, which increases RWAs and therefore increases required capital. (European Central Bank Banking Supervision, 2026; Bank for International Settlements, 2025)

One of the most widely used solvency indicators is the Common Equity Tier 1 (CET1) ratio, which compares high-quality capital (CET1) to RWAs. CET1 is designed to absorb losses immediately as they occur. (Bank for International Settlements, n.d.)

 

Figure 1. A simple explanation of risk-weighted assets (RWAs). Source: Investopedia (2025).

Because RWAs sit underneath capital ratios, errors in RWA calculation and reporting can mislead supervisors and market participants about a bank’s true capital position and risk profile. (European Central Bank Banking Supervision, 2026)

What the ECB found

The ECB identified two distinct reporting breaches. (European Central Bank Banking Supervision, 2026)

Key breaches

·         Credit risk misclassification: For 15 consecutive quarters, the bank misclassified certain corporate exposures and applied lower risk weights for credit risk than EU banking rules prescribe, reducing reported RWAs. (European Central Bank Banking Supervision, 2026; Council Regulation (EU) No 575/2013, Article 153)

·         Credit valuation adjustment (CVA) risk exclusion: For 21 consecutive quarters, the bank unduly excluded certain transactions when calculating RWAs for CVA risk (the risk that a derivative counterparty defaults), again reducing reported RWAs. (European Central Bank Banking Supervision, 2026)

The ECB stated that the wrong figures prevented it from having a comprehensive view of the bank’s risk profile. (European Central Bank Banking Supervision, 2026)

Why this mattered

·         Supervisory visibility: Understated RWAs can cause supervisors to underestimate the capital a bank is required to hold, at least on paper. (European Central Bank Banking Supervision, 2026)

·         Market confidence: Capital ratios are key indicators of capital strength. If reported ratios are overstated, external stakeholders may misjudge a bank’s resilience. (European Central Bank Banking Supervision, 2026)

·         Regulatory signal: Reuters reported this as the ECB’s largest fine to date, underscoring the supervisory focus on data quality and accurate reporting. (Reuters, 2026)

Scale of the penalty in context

The penalty is meaningful in supervisory terms, but it is financially immaterial for the wider group. JPMorgan Chase & Co. reported full-year 2025 net income of $57.0 billion. (JPMorgan Chase & Co., 2026)

Potential impacts and consequences

·         Remediation costs: Beyond the fine itself, the bank may incur costs to strengthen data, systems, and control frameworks to prevent recurrence.

·         Reputational exposure: Public enforcement actions can trigger increased scrutiny from investors, clients, and counterparties, even when the monetary amount is small.

·         Follow-up supervision: Enforcement action often results in deeper supervisory engagement, targeted reviews, and evidence requirements around remediation.

Reuters reported that JPMorgan said it had identified and self-reported the issue and that it had been corrected; the ECB’s decision may be challenged before the Court of Justice of the European Union. (Reuters, 2026; European Central Bank Banking Supervision, 2026)

Lessons for governance and data control

·         Treat reporting as a risk control, not an administrative task: Prudential reporting is part of the bank’s control environment and should be owned accordingly.

·         Build defensible data lineage: Banks need clear data lineage from source systems to regulatory outputs, supported by audit trails and independent checks.

·         Design controls for drift and change: Risk weights, classifications, and reporting taxonomies evolve. Controls must be designed to detect drift, not only obvious errors.

Recommendations

For J.P. Morgan SE

·         Strengthen end-to-end RWA governance (ownership, controls, and escalation) and document how classifications and exclusions are validated each reporting cycle.

·         Run independent assurance: commission targeted third-party reviews of RWA processes, including CVA RWA scope and controls, until supervisory confidence is restored.

For the wider banking sector

·         Standardise validation routines and peer learning: develop common data quality checks for RWA reporting and share lessons learned through supervisory and industry forums.

·         Use the Basel framework as a stable reference point when implementing risk-weighting approaches and internal controls. (Bank for International Settlements, 2025)

Conclusion

This case illustrates a simple but critical point: when RWAs are misstated, the capital ratios built on them are also misstated. The ECB’s action shows that supervisors are willing to sanction reporting failures that reduce transparency, even when the underlying business remains profitable and well-capitalised. (European Central Bank Banking Supervision, 2026; Reuters, 2026)

References

Bank for International Settlements. (2025, June 10). Basel Framework: CRE 20 – Standardised approach: individual exposures. https://www.bis.org/basel_framework/chapter/CRE/20.htm

Bank for International Settlements. (n.d.). Definition of capital in Basel III – Executive Summary. https://www.bis.org/fsi/fsisummaries/defcap_b3.pdf

Council Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and investment firms (Capital Requirements Regulation). Article 153. https://www.legislation.gov.uk/eur/2013/575/article/153/data.xht

European Central Bank Banking Supervision. (2026, February 19). ECB sanctions J.P. Morgan for misreporting capital requirements. https://www.bankingsupervision.europa.eu/press/pr/date/2026/html/ssm.pr260219~93d5b6f73e.en.html

Investopedia. (2025, April 15). Risk-Weighted Assets: Definition and Place in Basel III. https://www.investopedia.com/terms/r/riskweightedassets.asp

JPMorgan Chase & Co. (2026, January 13). 4Q25 earnings press release (PDF). https://www.jpmorganchase.com/content/dam/jpmc/jpmorgan-chase-and-co/investor-relations/documents/quarterly-earnings/2025/4th-quarter/d868c7ef-1670-465d-ba75-c2b36ddbcc6b.pdf

Reuters. (2026, February 19). ECB fines JPMorgan’s European arm 12.2 million euros for misreporting capital requirements. https://www.reuters.com/legal/government/ecb-fines-jpmorgan-122-mln-euros-misreporting-capital-requirements-2026-02-19/