BSP Circular 1241 moves banks to Basel III operational-risk capital from end-2027

Implications for lenders

Banks that lend through digital channels may find that fraud and system-failure losses raise their capital needs from the December 2027 reporting period, which can affect pricing and growth plans for small unsecured loans. Building complete operational-loss records now can help, because the parallel-reporting phase will show how much capital the new method requires.

Implications

Facts

The circular: in Circular No. 1241 dated 9 October 2026, Bangko Sentral ng Pilipinas (BSP) adopted the Basel III New Standardized Approach (NSA) for calculating the capital banks must hold against operational risk. It replaces the Basic Indicator Approach and the Standardized Approach and applies to universal, commercial and digital banks, their subsidiary banks and quasi-banks, according to Inquirer and Daily Tribune reports of 14–15 October.

Method: BSP describes the NSA as more risk-sensitive because it considers a bank's income and its historical operational loss experience, with operational risk rising at an increasing rate as income grows. Operational risk covers losses from inadequate or failed internal processes, people and systems and from external events such as natural calamities; the reports cite cyberattacks, fraud and technology disruptions as examples. Banks are expected to strengthen operational-risk management and keep comprehensive historical loss databases.

Timeline: during a monitoring period, banks must report capital adequacy ratios under both the NSA and the existing methods, and the existing methods remain the basis for minimum capital compliance. Full implementation starts with the reporting period ending December 2027. Banks that show adequate readiness may adopt the NSA earlier, subject to notifying BSP and post-verification. The reports give no calibration or estimate of the capital effect.

Analysis

BSP capital measures in 2026: Memorandum No. 2026-027 (June) lets banks and quasi-banks exclude certain unrealised losses on peso government securities from regulatory capital from 1 April to 31 December 2026. Circular No. 1240 (21 September) requires thrift, rural and cooperative banks with digital-bank-like business models to hold PHP 1 bn of capital. ¹ Circular No. 1241 now changes how operational-risk capital is measured from end-2027. The temporary relief eases capital this year, while the two circulars raise the bar for digitally driven banks over the coming year.

New method: the Basel standardised approach starts from a measure of income that rises more than proportionally for larger banks and can be adjusted for a bank's own loss history, according to the BIS summary of the standard. For fast-growing digital banks, both income growth and recorded fraud or outage losses can therefore feed into capital needs, depending on how BSP applies the loss component.

Counterpoints and uncertainties

The reports give no calibration, thresholds or estimated capital effect, so the impact on individual banks will only become visible through parallel reporting. Early adoption is optional, and BSP may adjust details before full implementation. For most consumer lenders, credit-risk capital is likely to remain the larger requirement.