ECB Financial Stability Review: Risks That Hit Reporting Teams

ByOfficer

Last updated: April 2026

When the ECB flags a risk in the Financial Stability Review, it does not stay abstract for long. Those flagged risks show up in SREP letters, in ICAAP challenge sessions, and in the questions supervisors ask about your Pillar 3 disclosures. The November 2025 edition, published on 26 November 2025, identifies three clusters of vulnerability that directly affect how EU banks model stress, report exposures, and explain risks to the market. If your reporting team treats the FSR as a macro publication for economists, you will be caught off guard when the CSSF or your JST starts asking pointed questions about tariff-sensitive credit concentrations or NBFI funding dependencies in your next supervisory dialogue.

I have been through several ICAAP cycles where the gap between what the FSR flags and what institutions actually stress-test becomes the central friction point in the supervisory review. The November 2025 edition makes that gap harder to ignore.

Related reading: ICAAP and ILAAP reporting requirements for EU banks

What the ECB Financial Stability Review Actually Says

The November 2025 FSR, presented by Vice-President Luis de Guindos, organises risks around three main vulnerability clusters. These are not new categories, but the specificity of the ECB’s language has sharpened compared to previous editions.

The first cluster covers stretched valuations in increasingly concentrated asset markets. Global equity markets hit all-time highs despite elevated trade policy uncertainty. The ECB explicitly names AI-related earnings expectations as a potential trigger for abrupt sentiment shifts. The top ten S&P 500 firms now account for a historically high share of total market capitalisation, and euro area non-bank financial intermediaries hold concentrated US dollar exposures.

The second cluster addresses fiscal challenges in advanced economies. Euro area sovereigns benefited from flight-to-safety dynamics after the April 2025 tariff turmoil, but the ECB warns that defence spending needs (NATO’s new 5% of GDP target by 2035), persistent structural deficits, and steepening yield curves could strain fiscal positions. French sovereign spreads moved closer to Italian levels, a convergence that does not reflect improving French fundamentals.

The third cluster targets credit risk from tariff-sensitive corporates and growing bank-NBFI funding interlinkages. Corporate insolvencies have been rising. Manufacturing sectors, which are export-oriented and tariff-exposed, account for large shares of total credit and employment. The ECB warns that banks’ growing dependence on short-term, volatile non-bank funding could become a vulnerability during market stress.

The reporting implications flow from all three clusters.

ICAAP Stress Scenarios: Where the FSR Forces Changes

The ECB’s ICAAP Guide expects institutions to define adverse and severely adverse scenarios that reflect the most material risks to their business model. The November 2025 FSR effectively prescribes what those scenarios should capture for the current cycle.

Tariff Shock Scenarios

The FSR identifies tariff-sensitive sectors as a key credit risk driver. For banks with material exposures to manufacturing, automotive, or export-oriented corporates, the ICAAP adverse scenario needs to model a re-escalation of trade tensions. The real problem starts when teams try to calibrate the severity. The FSR notes that “measures of trade policy uncertainty have eased notably from their April highs, but uncertainty continues to linger, with potential for renewed spikes.” That language tells you the ECB expects the adverse scenario to include a tariff spike, not just a gradual erosion of trade volumes.

I have seen ICAAP submissions where the trade risk was buried in a generic GDP decline. That approach will not pass the supervisory challenge anymore. The ECB now provides a direct causal chain: tariffs hit export-oriented corporates, insolvencies rise, layoffs follow, household debt servicing capacity weakens, and NPLs emerge across both corporate and retail portfolios. Your stress scenario needs to trace that chain, not just apply a uniform PD shock.

Sovereign Risk and Interest Rate Scenarios

The FSR’s discussion of steepening yield curves, Dutch pension fund reforms reducing demand for long-dated debt, and the risk of sovereign risk repricing feeds directly into interest rate risk scenarios. For Luxembourg banks with sovereign bond portfolios or significant IRRBB exposures, the ICAAP needs to model a scenario where sovereign spreads widen asymmetrically. The convergence of French and Italian spreads is precisely the kind of signal that should appear in your scenario narrative.

This is where teams usually misclassify the risk. They model a parallel shift in rates and call it done. The FSR describes a steepening scenario combined with spread widening for weaker sovereigns, while stronger sovereign yields compress due to flight-to-safety flows. That asymmetry matters for IRRBB calculations and for the economic value of equity under stress.

NBFI Contagion Scenarios

The third scenario the FSR demands is harder to model but impossible to ignore. The ECB’s Special Feature B in this edition examines systemic risk from bank-NBFI linkages specifically. The message: banks that rely on short-term non-bank funding could face simultaneous outflows and counterparty credit losses during a market stress event. For ICAAP purposes, the scenario should include a funding stress where non-bank deposits and repos withdraw within a compressed timeframe, combined with mark-to-market losses on exposures to investment funds or hedge fund counterparties.

Not modelling this is a gap the JST will identify. The 2025 EU-wide stress test already tested bank resilience under severe conditions. If your ICAAP scenarios are less severe than the EBA stress test adverse scenario on NBFI-related risks, that disconnect will be questioned.

Pillar 3 Disclosures: New Pressure Points

The FSR does not amend the Pillar 3 framework. But it signals what supervisors and market analysts will scrutinise when they read your disclosures.

Concentration Risk in Tariff-Sensitive Sectors

Under CRR Article 442 and the EBA’s ITS on Pillar 3 disclosures (Commission Implementing Regulation 2021/637), institutions disclose credit risk by economic sector. The FSR highlights that manufacturing and export-oriented sectors are disproportionately exposed to tariff impacts. If your Pillar 3 report shows significant credit concentrations in these sectors without corresponding narrative on how you manage the tariff risk, that silence will be noticed. The ECB explicitly states that “tariff-sensitive and export-oriented sectors, such as manufacturing, account for a large share of total value added, credit and employment, implying that shocks affecting these sectors could have broader repercussions.”

The risk here is not just about NACE sector breakdowns. It is about the qualitative Pillar 3 disclosure under Article 435 CRR, where institutions describe their risk management objectives and policies. After this FSR, supervisors will expect the risk management discussion to address tariff exposure, even if the bank does not classify it as a standalone risk category.

NBFI Exposures and Funding Dependencies

Pillar 3 templates on counterparty credit risk (CCR) and large exposures already capture bank-NBFI linkages. The FSR highlights that the share of volatile, short-term liabilities from non-banks constitutes a significant portion of overall funding. For institutions with material NBFI funding, the Pillar 3 narrative should explain the maturity profile of these liabilities and the substitutability risk the ECB describes.

The common mistake here is treating NBFI funding as stable because it has been stable historically. The FSR warns that “funding from non-banks may be difficult to substitute, due to their high concentration among a few large banks and the preference of non-banks for specific funding instruments.” If your Pillar 3 report does not mention this concentration risk, the disclosure looks incomplete against the backdrop of the ECB’s own analysis.

Sovereign Exposure Disclosures

EBA Guidelines on Pillar 3 require disclosure of sovereign exposures by country. The FSR’s discussion of diverging fiscal trajectories and the risk of sovereign spread repricing puts these disclosures under sharper focus. Institutions holding French, Italian, or other higher-deficit sovereign debt should ensure their Pillar 3 narrative addresses the ECB’s specific concern about fiscal sustainability and potential sovereign risk spillovers.

COREP and FINREP: Operational Reporting Adjustments

The FSR does not change COREP or FINREP templates. But it affects how supervisors interpret the data you submit.

Credit Risk Templates and Sectoral Breakdowns

COREP CR SA and CR IRB templates require sectoral breakdowns of credit exposures. After the FSR’s emphasis on tariff-sensitive sectors, expect supervisory data requests that cross-reference your COREP sectoral exposures with your institution’s assessment of tariff sensitivity. In Luxembourg, where many banks have exposures to international corporates through fund lending, trade finance, or direct corporate lending, the CSSF may ask how tariff-exposed borrowers are flagged in your internal rating systems.

The FSR notes that “insolvencies have been rising across sectors and countries in light of continued weak and uncertain business prospects.” If your COREP data shows stable or improving asset quality metrics while the ECB is documenting rising insolvencies, that divergence will draw attention.

Liquidity Reporting and NBFI Funding

COREP liquidity templates (LCR and NSFR) already capture the maturity profile of funding sources. The FSR’s warning about volatile non-bank funding concentrations means supervisors will look more closely at how NBFI-sourced deposits and repos are classified in your LCR outflow assumptions. If non-bank operational deposits receive preferential outflow treatment without strong evidence of the relationship’s stability, that classification is now more exposed to challenge.

For ILAAP purposes, the same logic applies. The FSR describes a scenario where non-bank funding withdraws simultaneously with asset price declines. If your ILAAP liquidity stress test does not model correlated NBFI outflows and market value haircuts on pledged collateral, it falls short of what the ECB implicitly expects.

The Luxembourg Angle: CSSF and Local Reporting

Luxembourg banks sit at the intersection of several FSR risk themes. The fund industry creates significant bank-NBFI linkages through depositary relationships, prime brokerage, and fund lending. Luxembourg’s open economy makes it directly exposed to trade policy uncertainty. And sovereign exposures in Luxembourg bank portfolios often include significant holdings of French, German, and other euro area government bonds.

The CSSF, as the national competent authority within the SSM, uses the FSR’s risk assessments to inform its supervisory priorities. In previous cycles, CSSF supervisory letters have referenced ECB financial stability publications when requesting additional information on specific risk areas. After the November 2025 FSR, expect heightened attention on three fronts.

First, depositary banks and banks with significant fund administration activities will face questions about their NBFI interlinkages. The ECB’s Special Feature B specifically examines systemic risk from these linkages, and Luxembourg is one of the largest fund domiciles globally.

Second, banks with corporate lending books will need to demonstrate how tariff sensitivity is integrated into their credit risk frameworks. The common error here is assuming that because Luxembourg corporates are primarily in services, the tariff risk is immaterial. Many Luxembourg-domiciled entities are holding companies or treasury centres for manufacturing groups. The look-through matters.

Third, the CSSF’s own quarterly reporting requirements and BCL statistical reporting will be read against the FSR’s findings. If your BCL balance sheet statistics show growing NBFI funding while the ECB warns about concentration risk in that exact funding channel, the CSSF will connect those dots.

Timing: When These Risks Hit Your Reporting Calendar

The November 2025 FSR was published seven months before this article. The next FSR is scheduled for 27 May 2026. That timing matters because it aligns with several reporting milestones.

ICAAP and ILAAP submissions typically coincide with the SREP cycle. If your institution’s ICAAP was last updated before the November 2025 FSR, the gap is already visible. The 2025 EU-wide stress test results, published in August 2025, confirmed that euro area banks are adequately capitalised under severe stress. But the FSR adds risks that the stress test may not have fully captured, particularly the tariff transmission chain and NBFI funding withdrawal scenario.

Pillar 3 annual disclosures for the 2025 financial year are due in early 2026. The risk management narrative in those disclosures should reflect the FSR’s risk themes. Waiting for the May 2026 FSR before updating your disclosure language means publishing stale risk narratives for an entire reporting period.

COREP and FINREP quarterly submissions continue on their standard remittance schedule. The operational impact is less about changing what you report and more about being prepared for ad hoc supervisory data requests that reference the FSR’s findings.

What Gets Wrong When Teams Ignore the FSR

The most common failure is treating the FSR as a publication for economists rather than a supervisory signal. Three specific errors recur.

First, ICAAP scenarios that do not reflect the FSR’s risk themes. The ECB publishes the FSR twice a year. The SREP assesses the ICAAP at least annually. If the FSR identifies tariff risk, NBFI contagion, and sovereign repricing as the top three vulnerabilities, and your ICAAP adverse scenario models a generic recession without addressing any of them, you have a credibility problem in the supervisory dialogue.

Second, Pillar 3 disclosures with boilerplate risk descriptions. After several years of low credit losses, many institutions have settled into templated Pillar 3 narratives that describe risk management frameworks without engaging with actual risks. The November 2025 FSR gives supervisors specific topics to check against your disclosure. Vague references to “geopolitical uncertainty” without naming tariff sensitivity, NBFI funding concentration, or sovereign spread risk will read as incomplete.

Third, ignoring the NBFI dimension entirely. Many smaller banks in Luxembourg and elsewhere assume that bank-NBFI interlinkages are only relevant for globally systemic institutions. The ECB’s data shows that non-bank funding dependence has grown across the banking sector, not just at the top. If your institution has significant money market fund deposits, insurance company funding, or pension fund placements, the FSR’s warnings apply to you.

Connecting the FSR to Your Next SREP Cycle

The SREP methodology, as described in the EBA Guidelines on SREP (EBA/GL/2022/03), requires supervisors to assess whether the institution’s risk identification and measurement captures the material risks to its business model. The ECB’s SSM SREP methodology adds a layer of macro-financial risk assessment that draws directly from the FSR.

For reporting teams, the practical takeaway is straightforward. Read the FSR. Map its risk themes against your ICAAP scenarios, your Pillar 3 narrative sections, and your COREP exposure breakdowns. Identify the gaps. Close them before the supervisory dialogue, not during it.

The November 2025 FSR is unusually specific about causal chains: tariffs lead to corporate stress, which leads to layoffs, which leads to household NPLs. That specificity is a gift for reporting teams because it tells you exactly what the supervisor expects your scenario to trace. Use it.

Frequently Asked Questions

How often is the ECB Financial Stability Review published?

The ECB publishes the Financial Stability Review twice a year, typically in May and November. The November 2025 edition was published on 26 November 2025. The next release is scheduled for 27 May 2026.

Does the FSR create new reporting obligations?

No. The FSR does not amend COREP, FINREP, or Pillar 3 templates. It does, however, signal the risks that supervisors will focus on when reviewing existing reports. In practice, this means the FSR shapes what supervisors expect to see in ICAAP submissions, Pillar 3 narratives, and responses to ad hoc data requests.

How should ICAAP stress scenarios reflect the November 2025 FSR?

At minimum, the adverse scenario should incorporate a tariff escalation that impacts export-oriented and manufacturing sector borrowers, a sovereign spread widening with asymmetric dynamics across euro area countries, and a simultaneous NBFI funding withdrawal combined with counterparty credit losses. Generic GDP decline scenarios without sector-specific transmission channels are unlikely to satisfy supervisory expectations.

What Pillar 3 sections are most affected by the FSR’s findings?

The risk management narrative under CRR Article 435, the credit risk sectoral breakdowns under Article 442, and the counterparty credit risk disclosures are the most directly affected. Institutions should also review their sovereign exposure disclosures in light of the FSR’s fiscal sustainability warnings.

Are Luxembourg banks specifically exposed to the risks the FSR highlights?

Yes. Luxembourg’s fund industry creates significant bank-NBFI interlinkages through depositary, prime brokerage, and fund lending relationships. Many Luxembourg-domiciled entities are holding companies or treasury centres for international manufacturing groups, making tariff exposure relevant even for what appear to be services-sector books. Sovereign bond portfolios often include significant French and other euro area government debt.

What is the connection between the FSR and the SREP?

The ECB’s SSM SREP methodology uses the FSR’s macro-financial risk assessment to inform supervisory priorities. Risks flagged in the FSR are likely to appear in SREP letters, supervisory challenge sessions on ICAAP adequacy, and questions about Pillar 3 disclosure completeness. The EBA’s SREP Guidelines (EBA/GL/2022/03) require supervisors to assess whether institutions capture material risks, and the FSR defines what those material risks are.

Should banks update their risk appetite statements based on the FSR?

The regulation does not require this. In practice, if the FSR identifies risks that fall outside your current risk appetite framework, your ICAAP will show a gap between identified risks and managed risks. Supervisors will flag that gap. Updating the risk appetite statement to explicitly address tariff exposure, NBFI funding concentration, and sovereign concentration risk is a pragmatic step.

How does the 2025 EU-wide stress test relate to the FSR?

The 2025 EU-wide stress test, published in August 2025, confirmed adequate capitalisation under severe shocks. The November 2025 FSR identifies additional risks, particularly the tariff transmission chain and NBFI contagion, that the stress test scenario may not have fully captured. Institutions should ensure their internal ICAAP scenarios are at least as severe as the EBA stress test on these specific risk dimensions.

Related Articles

Key Takeaways

  • The ECB’s November 2025 Financial Stability Review identifies three risk clusters that directly affect ICAAP scenarios, Pillar 3 disclosures, and supervisory expectations: tariff-sensitive credit risk, sovereign fiscal challenges, and bank-NBFI interlinkages.
  • ICAAP adverse scenarios must now model tariff escalation with sector-specific transmission chains, not generic GDP declines. The ECB traces a causal path from tariffs through corporate stress, layoffs, and household NPLs.
  • Sovereign risk scenarios should capture asymmetric spread dynamics, not just parallel rate shifts. The convergence of French and Italian sovereign spreads despite different underlying fundamentals is a specific signal from the FSR.
  • NBFI funding withdrawal scenarios are no longer optional for banks with material non-bank funding dependencies. The ECB’s Special Feature B specifically examines systemic risk from these linkages.
  • Pillar 3 risk management narratives under CRR Article 435 should explicitly address tariff exposure, NBFI funding concentration, and sovereign concentration risk. Boilerplate language will not satisfy supervisory scrutiny.
  • Luxembourg banks face heightened attention on NBFI interlinkages due to the fund industry’s role, on tariff sensitivity through holding company and treasury centre exposures, and on sovereign bond portfolio composition.
  • The FSR does not create new reporting obligations, but it defines the risks that supervisors will check in existing reports, SREP dialogues, and ad hoc data requests.
  • Reporting teams should map FSR risk themes against their ICAAP scenarios, Pillar 3 narratives, and COREP exposure data before the next supervisory dialogue, not during it.

Sources and References

Disclaimer: The information on RegReportingDesk.com is for educational and informational purposes only. It does not constitute legal, regulatory, tax, or compliance advice. Always consult your compliance officer, legal counsel, or the relevant supervisory authority for guidance specific to your institution.

Similar Posts