◆ BANKING INTELLIGENCE BRIEF ◆ PARAGUAY: UENO BANK SEIZED — ~3 MILLION CUSTOMERS (60% OF ADULTS) LOCKED OUT OF APP, CARDS AND TRANSFERS ◆ PRESIDENT PEÑA RESIGNS, IMPEACHED 78–0 MINUTES LATER ◆ SERBIA: ALTA BANKA SHUT OVERNIGHT FOUR DAYS EARLIER — SPILLS INTO NORTH MACEDONIA AND MONTENEGRO ◆ JAPAN: 128 REGIONAL CO-OPERATIVE (SHINKIN) BANKS, 3,430 BRANCHES, ONE SHARED SYSTEM — OFFLINE FOR ~6 HOURS — EQUIPMENT FAULT, NOT A CYBERATTACK ◆ FRANCE: CRÉDIT MUTUEL ARKÉA ROBBED VIA A SUPPLIER — ~€118M ◆ TAIWAN: 427 UNAUTHORISED SINOPAC TRANSFERS ◆ BINANCE: US$6.3B HEIST, WITHDRAWALS FROZEN ◆ AUSTRALIA: CASH STILL 19% OF IN-PERSON PAYMENTS — HALF THE BANK BRANCHES GONE SINCE 2011 ◆ SHINYSIDEOUT.COM.AU ◆
◆ RESTRICTED DISTRIBUTION ◆ SHINYSIDEOUT.COM.AU INTELLIGENCE BRIEF ◆ NOT FOR RE-BROADCAST WITHOUT ATTRIBUTION ◆
Intelligence Brief · SSO-BANK-NOV26-001 · Bank Lockouts, Oct–Nov 2026Compiled: 8 November 2026Status: New
In Paraguay, three million people woke up to find their bank app dark, their cards dead and the branch doors locked. Four days earlier, Serbia’s central bank had shut a bank overnight, and the shock crossed two borders. Three days after Paraguay, 128 small regional co-operative banks across western Japan — separate banks sharing one computer centre — stopped dispensing cash in the middle of a Friday afternoon. In between, attackers emptied accounts in France and Taiwan, and the world’s biggest crypto exchange froze withdrawals. Are these connected? What caused each one? And if this is the canary, how far are we from the exit?
File RefSSO-BANK-NOV26-001
ClassificationPUBLIC INTEREST
Compiled8 NOVEMBER 2026
DomainBANKING · PAYMENTS · CASH · CYBER
BroadcastSHINYSIDEOUT RADIO
CompanionsPAY PACKET TO PERMISSION SLIP · THE MANAGED DECLINE · THE ETERNAL PANTRY
~3M
Ueno Bank customers locked out in Paraguay — about 60% of the country’s adults[1]
128 / 254
Regional co-operative (shinkin) banks offline at once — half of Japan’s 254, with 3,430 branches[4,8]
9 in 18 days
Lockouts, freezes or thefts, 20 Oct – 6 Nov — including two bank failures four days apart
19%
Share of Australians’ in-person payments still made in cash, 2025[27]
Something real happened in the past fortnight. In at least six countries, ordinary people could not reach money that was theirs — for six hours in some places, for days in others, and in Paraguay with no firm end date for anyone holding more than a small balance. This file sets out what happened in each case, what the people in charge say caused it, and whether the cases share anything underneath.
Every number comes from the public record: the regulators and banks involved, the Japanese wire service Jiji, the Associated Press, Taiwan’s Central News Agency, the Reserve Bank of Australia and APRA. Where something we saw circulating online didn’t match the record, we say so in the Editor’s Note below. Where we draw a conclusion of our own, it carries an Our read tag.
The through-line: these lockouts had three different causes — a bank going broke, a shared machine breaking, and thieves coming in through a supplier — but they all landed the same way, because almost everyone now reaches their money through a single digital door. When that door shuts, what matters is whether you have another one.
◆ Editor’s Note — We Checked What’s Circulating First ◆
Before building this file, we ran the claims doing the rounds on social media and in some headlines against the primary record. The short version: the lockouts are real and, in Paraguay, worse than a glitch. A few of the numbers attached to them need care.
Holds up
Paraguay froze millions out of their accounts. Correct. Ueno Bank’s customers lost access to the app, cards, transfers and cash from 3 November. The bank itself put its customer base at about 3 million, roughly 60% of adults.[1]
Holds up
Japanese ATMs and counters stopped. Correct, with one clarification: these were 128 separate small regional co-operative banks (shinkin banks) with about 3,430 branches between them, not 128 branches of one bank and not Japan’s big national banks. All 128, from Tokai to Kyushu, could not handle counter transactions, ATM deposits or withdrawals, or internet banking from about 1:30 pm on 6 November.[4]
Sharpen
“Japan banking crisis.” Some headlines used the word crisis. The operators say it was an equipment fault in a shared communications system, not a cyberattack, and every service was back by about 7 pm the same day.[5,7] No money left any account. That makes it an outage, not a solvency event — but, as Section 03 shows, it was Japan’s third big shared-system failure in three years.
Sharpen
“60% of the population frozen by a single keystroke.” It was 60% of adults, by the bank’s own count, and it followed a unanimous board vote after the central bank had warned Ueno about insider lending in June.[1] The freeze was sudden for customers; it was not sudden for the regulator.
Sharpen
“Two major banks collapse in four days … international banks caught in the fallout.”[41] Two banks did fail four days apart — Serbia’s Alta Banka on 30–31 October and Ueno on 2–3 November — and our first draft missed Serbia. But “major” fits Ueno (by customers) better than Alta, which held under 3% of Serbia’s banking market.[50] JPMorgan and Bank of America arranged Ueno’s US$350 million bond in March;[42,43] arrangers sell bonds on to investors, and who holds them now has not been disclosed. The blog’s US$814 million figure for Ueno’s outside funding doesn’t match Reuters, which reports about US$510 million.[42] We could not confirm the claim that Citibank and BNY were correspondent banks.
Not supported
“US stocks had their worst week since March 2020 and entered a bear market.” One widely shared write-up said this.[36] The index data doesn’t support it: the S&P 500 fell 4.4% on Thursday 5 November, its worst day since April 2025, and 2.68% over the week — the worst week since April 2025, not March 2020.[31,32] The sell-off was real; the bear-market label wasn’t.
Section 01 — The Eighteen Days
Nine Locked Doors, In Order
Taken one at a time, each of these stories got a day in the news. Laid end to end, they look different. Here is everything we could verify between 20 October and 6 November, in date order. Red cards are failures or thefts that locked customers out; blue are the authorities’ responses; gold are warnings that came first.
◆ 20 October – 6 November 2026 ◆ Who Got Locked Out, And Why ◆
Malware found on servers that FX traders rent from GMO Internet; up to 26,739 servers potentially affected. GMO shut the whole service on 21 October. The attackers demanded money and threatened accounts at more than 70 securities and FX firms. Five brokers confirmed trades their clients never placed and restricted those accounts.[18,19]
The world’s largest crypto exchange suspended withdrawals after the largest digital-asset theft on record. The FBI attributed it to North Korea’s TraderTraitor unit. About US$3 billion was frozen by industry partners. When withdrawals reopened, customers pulled out a net ~US$3.64 billion.[16,17]
30 Oct · United States
Warning
Chainalysis — the crypto-tracing firm — discloses a breach
The company police, regulators and exchanges use to trace stolen crypto says an attacker using “offensive agentic” (AI-driven) techniques reached its systems.[14]
30–31 Oct · Serbia
Bank failure
Alta Banka’s licence revoked overnight
After an emergency board meeting, the National Bank of Serbia revokes Alta Banka’s licence over a sharp deterioration in its finances and liquidity, after the bank failed to meet corrective measures. Cards, transfers and branches stop at once; the Deposit Insurance Agency takes over as insolvency administrator.[44,46] Three days later the owner, Davor Macura, is arrested on suspicion of illegally withdrawing about €383 million from the bank’s treasury.[45]
1–2 Nov · Montenegro · North Macedonia
Spillover
The failure crosses two borders
Montenegro’s central bank revokes the licence of Alta Pay, a related payment company, on 1 November. On 2 November North Macedonia places Alta Banka Bitola — about 95% owned by the Belgrade bank — under temporary administration after customers pulled out around €2 million in a short time; withdrawals there are capped.[47,48,49]
2–3 Nov · Paraguay
Bank failure
Ueno Bank seized; ~3 million customers locked out
The central bank board votes unanimously late on Monday 2 November to put Ueno into resolution after its solvency ratio fell below half the legal minimum. From Tuesday, customers cannot withdraw or transfer; police guard shuttered branches. Central bank chief Carlos Carvallo — who ran Ueno’s predecessor before the President appointed him — resigns.[1]
3 Nov · Taiwan
Supplier breach
427 unauthorised SinoPac transfers, ~NT$100,000 each
Money left 419 customers’ accounts without them logging in, all to one account at another bank — about NT$41.76 million in total. SinoPac says hackers breached security settings at suppliers of its new mobile banking system. Customers were refunded.[12,13]
4 Nov · France · Paraguay · US
Three at once
Arkéa robbed; Paraguay’s other banks buckle; Chainalysis goes dark
France: Crédit Mutuel Arkéa says attackers came in through a supplier’s platform and used the bank’s own account; it confirms the ~€118 million order of magnitude and delays some customer transfers.[11]Paraguay: a rush to open accounts at other banks crashes their mobile apps.[2]US: Chainalysis takes its transaction-screening product offline after “abnormal activity”, then says data for all users was exposed.[14]
5 Nov · Paraguay · Japan
Fallout
President resigns, impeached minutes later; Coincheck freezes
Paraguay’s lower house votes 78–0 to impeach President Santiago Peña minutes after he resigns; small-account payouts begin under a law rushed through the day before.[2] In Tokyo, crypto exchange Coincheck halts deposits and withdrawals from 00:04 because an outside transaction-screening service it relies on has failed.[15]
6 Nov · Japan
Shared-system failure
128 regional co-op banks, 3,430 branches, offline for ~6 hours
From about 1:30 pm, a fault in communications equipment at the shared system’s West Japan Centre stops counters, ATMs, internet banking and transfers at all 128 shinkin banks on that system — separate regional co-operative banks, sharing one back office. At one bank, cards stopped working even at partner and convenience-store ATMs.[40] Full recovery about 7 pm. Operators: equipment failure, not a cyberattack.[4,5,7]
Also in the same window: South Korea’s financial authorities said 37 financial companies had reported 40 cybersecurity incidents between 30 September and 3 November, exposing about 473,000 records, with no confirmed customer losses at the time (Aju Press, as summarised by IPSIP).[37] And on 6 November the Kospi fell more than 8% intraday, triggering a 20-minute market-wide trading halt.[33] A trading halt is not a bank lockout, so we leave it off the timeline.
Section 02 — Paraguay
When the Bank Itself Goes Broke
Ueno Bank was founded in 1976 and stayed small for decades. After it won a full banking licence in 2023 it became, in the words of Al Jazeera’s explainer, a household name within five years: cashback on groceries, more than 70 branches, its name on the national football team and the main stadium.[3] It reported about 3 million customers. It also held between US$800 million and US$850 million of public money, including about US$380 million from Paraguay’s state pension and health fund.[1]
The warning signs were on file. According to AP, the central bank warned Ueno in June that it was lending too much to companies tied to its own owners. Fitch moved its outlook on the bank to negative in October, citing rapid balance-sheet growth and a high level of intangible assets. Less than a week before the seizure, Ueno announced plans to raise US$100 million in fresh capital.[1] When the regulators corrected the books — poorly documented loans to related companies, and expenses wrongly counted as assets — the capital cushion fell to less than half the legal minimum.[2] Al Jazeera, citing the Paraguayan newspaper ABC Color, puts loans to companies tied to the owner, Grupo Vázquez, at US$146 million.[3]
What depositors faced
From 3 Nov · APNo withdrawals, no transfers, no cards. The app locked. Police stood outside branches; one depositor said he was told he couldn’t even stand outside.[1]
4 Nov · AP via NPRThe rush to open accounts at other banks crashed their mobile apps. The back-up door jammed because everyone ran for it at once.[2]
5 Nov · AP via NPRThe Labour Ministry estimates about 7,000 direct and indirect jobs affected at the bank and related businesses; staff protested for unpaid wages.[2]
What the guarantee covers
3 Nov · Central bank via APA central bank fund guarantees up to 228.3 million guaraníes (~US$38,000) per person — enough to fully cover an estimated 97% of Ueno depositors. By law, payable within 15 days.[1]
4–5 Nov · New lawAn emergency law requires repayment within five business days, starting with small accounts of up to about US$1,600 held by customers with no debts to Ueno.[2]
Larger balancesFor balances above the cap, the central bank promised only “the greatest possible protection”.[1] Pensions were moved: about 32,000 retirees paid through Ueno were shifted to another bank.[1]
Our read Notice the guarantee itself shrank in US dollars during the week — from about US$38,000 on 3 November to about US$36,000 by 5 November — while the guaraní fell nearly 7% against the dollar.[1,2] The cap is set in local currency, so a deposit guarantee is only as strong as the currency it is written in.
The politics moved fast. President Santiago Peña held a stake in Grupo Vázquez until March 2025, and appointed the former head of Ueno’s predecessor company to run the central bank that supervised it.[1,3] He resigned on 5 November and was impeached 78–0 minutes later, with even his party’s leader backing the vote. A judge jailed six Ueno executives pending trial; prosecutors have charged 27 bank officials and associates with breach of trust and attempted fraud.[2] The Attorney-General has opened three criminal investigations, including into oversight of the bank and the placement of public money in it.[3]
This is the oldest kind of bank failure there is: owners lending depositors’ money to themselves, regulators too close to the owners, and the public finding out last.
Shiny Side Out · summary of the AP and Al Jazeera record
Paraguay has been here before. In 1995 the central bank closed Bancopar, which had also lent to companies linked to its owners; three more banks failed, and the government had to cover the deposits of all four.[3] What is new this time is the speed and the reach. A digital-first bank with 60% of adults as customers meant that one board decision cut off a majority of the country’s adults from their everyday account in a single morning.
Four days earlier: Serbia
Paraguay wasn’t the first. In the early hours of Saturday 31 October, after an emergency session the night before, the National Bank of Serbia revoked the licence of Alta Banka. The regulator said the bank’s finances had deteriorated sharply, its liquidity was at risk, and it had failed to comply with measures ordered to fix that. Card payments, transfers and branch services stopped immediately.[44,46] Alta was a small player — under 3% of the Serbian market — but it had grown fast and handled bill payments for state bodies, including the state power utility.[44,50]
The pattern rhymes with Paraguay. Serbian media had long linked the owner to the outgoing government, and the closure came days after that government lost a parliamentary election; the central bank’s stated reason was financial, not political.[44,50] The owner was arrested on 2 November, suspected of taking about €383 million from the bank’s treasury.[45] Insured deposits are covered up to €50,000 per depositor.[47]
And unlike Ueno, Alta’s failure crossed borders. Its North Macedonian subsidiary was placed under temporary administration, with withdrawals capped at about 10,000 denars (roughly €160) a week, after customers pulled out around €2 million; its central bank stressed this was not a closure.[47,48,49] In Montenegro, a related payment company lost its licence; the central bank said it took no deposits and posed no risk to the financial system.[48]
Section 03 — Japan
When Nothing Attacks At All
Shinkin banks are Japan’s regional co-operative banks — the local lenders small businesses and families use. Each is a separate institution with its own name, board and customers: Osaka City Shinkin Bank, Hiroshima Shinkin Bank and Okazaki Shinkin Bank were among those hit.[4] They are not the national banks most international readers would recognise. There were 254 of them at the end of March 2026.[8] Many share their core systems through one operator, the Shinkin Joint Center, which runs a separate West Japan Centre.[7]
On Friday 6 November at about 1:30 pm, communications equipment at the western centre failed. Every shinkin bank on that system — 128 of them across Tokai, Hokuriku, Kinki, Chugoku, Shikoku and Kyushu (excluding Okinawa) — lost counter transactions, ATMs, internet banking and fund transfers at once.[4,6] Some services came back that evening, and the operators announced full recovery at about 7 pm, about five and a half hours after the fault. They say the cause was an equipment failure, not a cyberattack, and apologised for the “great inconvenience”.[5,7]
Two details matter. First, the Sankei newspaper reported that these 128 shinkin banks had upgraded their systems through the joint centre in mid-October, three weeks earlier.[6]Our read No one has linked the upgrade to the fault, and we don’t either; but it is the first question an investigator would ask, and the answer is worth watching for. Second, this is not a one-off.
Oct 2023 · Zengin
A fault in the Zengin Net relay computers — the interbank network almost every Japanese bank uses — disrupted more than 1.4 million domestic transfers. The bankers’ association called it the largest system failure it had experienced.[10]
29 Jan 2026 · Shinkumi
A system error at 4 am at the SKC Center, which processes for Japan’s 140 shinkumi credit co-operatives, knocked out remittances and counter deposits and withdrawals for about eight hours. Not a cyberattack, the operator said.[9]
6 Nov 2026 · Shinkin
128 shinkin banks, 3,430 branches, about 5.5–6 hours. ATMs, counters, internet banking, transfers. Not a cyberattack, the operators said.[4,5]
Three different shared systems, three failures, none of them attacks. This is the pattern economists call concentration risk and engineers call a single point of failure: banks share one back office to save money, so one broken box becomes 128 outages.
The same lesson, one day earlier, in crypto
On 5 November, Coincheck — one of Japan’s biggest crypto exchanges — froze deposits and withdrawals because an outside “on-chain analysis” service it uses to screen transactions had failed. It stressed there was no hack and customer assets were safe.[15] Coincheck did not name the provider. The freeze began hours after Chainalysis, the industry’s best-known screening firm, took its screening product offline over a breach.[14]Our read The timing fits, but the link is not confirmed. Either way the mechanism is the same as the shinkin outage: the exchange could not let money move without a check that someone else runs.
Section 04 — The Side Door
The Thieves Came In Through the Suppliers
Four of the nine incidents share another pattern: the attackers did not break down the bank’s front door. They came in through a company the bank trusted.
Crédit Mutuel Arkéa · France
The bank’s own Q&A, issued 4 November: attackers came in through a service provider’s platform and used Arkéa’s own account to send money to other banks, possibly to be turned into crypto. Customer accounts were not used and customer assets are unaffected; some transfers were delayed and most resumed that morning. It would not confirm the €118 million (US$133 million) figure in the press, but “validated the order of magnitude”.[11]
Worth notingArkéa warned customers to expect a wave of phishing attempts after the attack.[11]
Bank SinoPac · Taiwan
427 transfers of about NT$100,000 each from 419 accounts, to a single account at another bank. SinoPac says outside hackers breached security settings at the suppliers of its new mobile banking system; the system isn’t used by any other Taiwanese bank. Customers refunded; no evidence of a data leak; it will seek compensation from the supplier.[12,13]
Worth notingCustomers found the money gone from accounts they had not logged into. The regulator heard first from the bank, which heard first from customers posting online.[13]
Add GMO, where stolen trading logins came from rented servers rather than the brokers themselves,[19] and Chainalysis, whose breach reached into the screening that exchanges depend on,[14] and the shape is consistent. Our read A bank can harden its own walls and still be exposed through every supplier wired into it. The more banks share the same suppliers, the more one breach can travel.
Section 05 — Three Causes
Three Ways the Door Shuts
Here is every case in one table, sorted by cause. The question in the last two columns is the one that matters to a depositor: did customers lose money, and how long were they shut out?
Case
Cause (as stated)
Type
Customer money lost?
How long shut out
Ueno Bank, Paraguay
Insolvency after insider lending; capital below half the legal minimum[2]
Solvency
~97% of depositors fully covered by guarantee; above the cap uncertain[1]
◆ How Long People Were Shut Out — Outage vs Failure ◆
NAB, Australia · 23 Sep
~3 HRS
Shinkin, Japan · 6 Nov
~5.5 HRS
Shinkumi, Japan · 29 Jan
~8 HRS
Ueno Bank, Paraguay · 3 Nov
120+ HRS
Hours without normal access. NAB: ~3-hour digital outage[22]. Shinkin: 1:30 pm to ~7 pm[7]. Shinkumi: from 4 am, restored in stages about eight hours later[9]. Ueno: counted from 3 November to this file’s compile date (8 November); small accounts began receiving payouts on 5 November, so the bar is the outer limit for most, not all, depositors[1,2]. Takeaway: an outage is measured in hours; a failure is measured in days, and for balances above the guarantee, possibly much longer.
Section 06 — The Canary Question
Could It Spread? Three Ways a Lockout Travels
A canary in a coal mine doesn’t cause the gas. It shows you the gas is there. Miners didn’t watch it to learn where the mine was. They were already underground. They watched it to know when to move, and what kept them alive was how far they were from the way out. So the useful question isn’t whether Paraguay will cause a lockout somewhere else — it almost certainly won’t — but whether these cases reveal a condition that exists elsewhere too, and how close the exits are when it shows. We looked at three ways a problem like this can travel.
◆ Channel 1 — Money: does one failure pull down others? ◆ Evidence: real, but contained so far
Serbia shows it can happen. Alta’s failure travelled through ownership: within two days its North Macedonian subsidiary was under administration with capped withdrawals, and a related Montenegrin payment firm had lost its licence.[47,48]Paraguay shows the international threads. Ueno raised about US$510 million from development institutions, international funds and capital markets, including a US$350 million bond arranged by JPMorgan and Bank of America.[42,43] Whoever now holds those bonds is exposed; who that is hasn’t been disclosed. Both regulators insist the damage is contained: Paraguay’s interim central bank president said “the banking system is sound”, and Serbia’s banking association said other banks were operating normally.[38,50] The six US failures this year were all small, and depositors at the largest were moved to another bank over a weekend.[20,21] On the record so far, contagion has followed ownership and lending links, and stopped there — no healthy bank has failed because of Alta or Ueno. The caveat: six US failures is more than 2024 and 2025 combined, and that trend is worth watching.[20]
◆ Channel 2 — Plumbing: does one broken system lock many doors? ◆ Evidence: strong
This is the channel the past fortnight proves. One equipment fault shut 128 separate regional banks at once. One outside screening service failing stopped a crypto exchange. One supplier’s weak settings let thieves into a bank that thought it was secure.[4,12,15] Shared systems exist everywhere, including here: when NAB’s outage took down its app, internet banking and business platform together, an IT expert told The Nightly it pointed to “a shared dependency underneath those channels”.[22]This kind of lockout doesn’t need to spread. It is already everywhere, waiting for its fault.
◆ Channel 3 — Panic: does fear jam the exits? ◆ Evidence: proven in Paraguay
The most important sentence in the Paraguay coverage may be this one: on 4 November, a rush to open new accounts at other banks crashed those banks’ apps.[2] Those banks were solvent. Their doors jammed anyway, because a whole country tried to walk through them on the same morning. Binance showed the same reflex: when withdrawals reopened, customers took out a net ~US$3.64 billion.[17]Our read The lesson isn’t “panic”. It’s that the back-up you set up during a crisis is the back-up everyone else is setting up too.
So, is it a canary? Our read Not of a coming global banking collapse — the evidence doesn’t show that, and we won’t pretend it does. It is a canary for something narrower and more certain: a financial life that runs through one app, one card and one bank has no give in it — and no nearby exit. Paraguay showed what happens when the bank fails. Japan showed what happens when nothing fails except a box in a server room. The outcome for the person at the ATM was the same.
Section 07 — Australia
How Many Doors Do We Have?
We have outages too
Australia’s big banks are well capitalised and supervised by APRA. That protects against a Ueno. It does not protect against a shinkin. On 28 January 2026, CommBank’s app and NetBank were unavailable for some customers, and the same day ANZ apologised for delays to payments including salaries and pensions.[23] On 23 September, NAB’s app, internet banking and phone lines went down for about three hours; some customers couldn’t pay with phone wallets, though NAB said its ATMs remained available.[39] Primara Research counted 1,058 minutes of digital outage at CommBank and 831 minutes at NAB over the previous 12 months.[22]
If an Australian bank did fail
The Financial Claims Scheme guarantees deposits up to $250,000 per account holder per bank, covering transaction, savings and term-deposit accounts and offset accounts. If the government activates it, APRA “will endeavour” to pay most account holders within seven calendar days. As of APRA’s explainer, it had been activated only once, in 2009.[24] Two details most people miss:
The cap is per banking licence, not per brand. Different brands run under one licence share one $250,000 limit.[25]
The money is paid into an account at a different institution, which you nominate.[25] Paraguay just showed what happens when millions of people try to open that account in the same week.[2]
There is also a long-running argument about whether APRA’s 2018 crisis resolution powers could ever be used to “bail in” deposits. The Australian Banking Association’s 2020 submission to a Senate inquiry says deposits are protected and could not be bailed in during a resolution.[34] Campaigners, led by the Australian Citizens Party, argue the law does not expressly exclude deposits and point to a legal opinion saying it could.[35] The question has never been tested in a real Australian bank failure. We set out both sides and take no position on the legal merits.
The other door: cash
Every lockout in this file had the same fallback: physical cash, if you had it, and if a shop would take it. Australians had already been moving off it fast, then stopped. The latest RBA survey shows cash use stabilised, and even rose slightly, in 2025.
◆ Cash Share of In-Person Payments, Australia ◆
Share of in-person payments by number made in cash. 2007 and 2010: RBA Bulletin, Sept 2011[29]. 2019 and 2022: RBA Research Discussion Paper 2023-08[28]. 2025: RBA Bulletin, April 2026[27]. The dashed line joins 2010 to 2019 for readability; the 2013 and 2016 survey points are not plotted here. Takeaway: cash fell from three in four in-person payments to one in six, then stopped falling. About one in five in-person payments is still cash.
But the places to get cash have kept shrinking. The RBA’s own access-to-cash study found the number of bank branches fell by nearly 50% (3,239 branches) between 2011 and 2024, and ATMs fell by over a quarter (9,100 machines) from their late-2016 peak. About 1.5 million adult Australians use cash for at least 80% of their in-person payments, and a quarter of survey respondents said they would face genuine hardship or major inconvenience if cash were hard to get or use.[30] We traced the long arc of that decline in From Pay Packet to Permission Slip.
One thing has changed in cash’s favour. Since 1 January 2026, most grocery and fuel retailers must accept cash for in-person purchases of $500 or less between 7 am and 9 pm; businesses turning over less than $10 million are exempt unless they share a trademark with a larger retailer. Bills can still be paid in cash at Australia Post. The government will review the mandate after three years.[26] In the scenario this file describes — card networks or bank apps down for an afternoon — that mandate is the difference between buying fuel and food and not. It matters most to the households already stretched by the costs we documented in Fuel Crisis 2026.
◆ Where This Connects ◆
The single door is a choice the system has been making for us. Branches close, ATMs come out, and the app becomes the only way in. That is cheaper for banks, and most days it works. This fortnight showed what it costs on the days it doesn’t. The same question sits under 1984 By Consent and The Managed Decline: when access to money runs through one channel, whoever controls the channel — or whatever breaks it — decides when you can pay.
And the market wobble of the same week ties back to The Great Flip: coverage tied the 5 November sell-off to investor fears that a new US Congress could slow the AI data-centre build-out.[33] That is a separate story from bank lockouts — but it’s the same lesson about leaning everything on one thing.
Section 08 — Limits
What We Won’t Overstate
◆ The Limits of This File ◆
No evidence of co-ordination. These incidents had different stated causes: insolvency, equipment failure, and theft through suppliers. Several happening in the same fortnight does not show they were linked or planned, and we found no credible source saying they were. Serbia and Paraguay share a pattern — fast growth, owners close to government, a change of political wind — but no shared owner, lender or regulator that we could find. The political-timing claims in Serbia are reported, not proven.
Most customers were, or will be, made whole. Arkéa and SinoPac say customers lost nothing in the end; Binance says it is covering losses; Paraguay’s guarantee is expected to fully cover about 97% of Ueno depositors.[1,11,13,16] The harm was being cut off, not (for most) being robbed.
Japan was fixed the same day. Calling it a crisis overstates it. Calling it nothing understates it: it was the third major shared-system failure in Japanese banking in three years.
Some facts are still moving. Ueno’s payout timetable, the cause of the shinkin fault and the full losses at Arkéa and Binance were all still being worked out at compile time. Figures for the Paraguay guarantee shifted during the week as the currency fell.
The bail-in argument is contested. We report the industry’s position and its critics’; neither has been tested by an actual failure here.
What would change our view: evidence that any of these incidents shared an attacker or a supplier; a second Paraguayan bank failing; or an Australian outage lasting days rather than hours.
◆ So. What Do You Do With This? ◆
This is information, not instruction — and not financial advice. Nothing here suggests withdrawing your savings. The aim is simpler: make sure that if one door shuts for an afternoon, or a week, you have another one that opens.
Have a second everyday account, at a separately licensed bank, before you need it. Check the licence, not the logo — brands under one licence share one $250,000 guarantee.[25] In Paraguay, the people who tried to open a second account during the crisis found the apps had crashed.[2]
Make sure the two don’t share the same plumbing where you can tell. A credit union or mutual bank alongside a big-four bank is a genuinely different door; two apps from the same banking group are not.
Keep some cash at home. Enough for a few days of food, fuel and medicine covers almost every outage in this file. Supermarkets and service stations covered by the mandate must take it for purchases of $500 or less.[26] Practical storage advice is in The Eternal Pantry.
Carry a physical card as well as your phone. In NAB’s September outage, some phone-wallet payments failed while its ATMs stayed available.[22,39]
Keep an offline record of your balances. Download a statement for each account every month or so. If a claim ever has to be made, it helps to have your own proof.
Read APRA’s Financial Claims Scheme page so you know what is covered and how payment works before you ever need it.[24]
Expect scam calls after every breach. Arkéa warned its customers to expect phishing.[11] Your bank will not ask for a password or a code; hang up and ring the number on the back of your card.
Have your say on cash. The cash mandate is to be reviewed after three years.[26] If you think it should cover more businesses, pharmacies for example, tell your local member now, while it’s on the record.
Primary documents are linked wherever they are public (regulators, the banks’ own statements, the RBA and APRA). For events reported only in the news, we name the outlet. Japanese and French sources are in the original language.
Associated Press (via KSAT), Paraguay seizes major digital bank tied to president, leaving millions of customers in limbo, 3 Nov 2026. ksat.com
Associated Press (via NPR / KAXE), Paraguay’s president is impeached minutes after resigning following a bank collapse, 5 Nov 2026. kaxe.org
Al Jazeera, How Paraguay’s Ueno collapse is only its latest banking crisis, 6 Nov 2026. aljazeera.com
Jiji Press, 128信金でATM利用できず 西日本地域、システム障害で (ATMs unusable at 128 shinkin banks), 6 Nov 2026, 19:25. jiji.com
Jiji Press, 信金のシステム障害、完全復旧 西日本地域、機器の故障が原因 (Shinkin system fully restored; equipment failure the cause), 6 Nov 2026, 21:47. jiji.com
Sankei Shimbun (via Yahoo! News Japan), 西日本の128信金のシステム障害が復旧 「機器の故障」が原因か, 6 Nov 2026 (regions affected; mid-October system update). news.yahoo.co.jp
Business+IT (via Yahoo! News Japan), 西日本の128信金が6時間近く停止、原因は通信機器の故障, 7 Nov 2026 (13:30 fault; ~19:00 full recovery; joint statement by Shinkin Central Bank, Shinkin Joint Center and the National Association of Shinkin Banks). news.yahoo.co.jp
Shinkin Central Bank Research Institute, 全国信用金庫概況・統計 2025年度 (254 shinkin banks at end-March 2026). scbri.jp (PDF)
Jiji Press (via Adnkronos), 140 Japanese Credit Cooperatives Hit by System Glitch, 29 Jan 2026. english.adnkronos.com
Arab News Japan, 「全銀ネット」で大規模システム障害、140万件の送金に支障 (Zengin Net failure disrupts 1.4 million transfers), 11 Oct 2023. arabnews.jp
Crédit Mutuel Arkéa, Informations complémentaires suite à l’attaque dont le Crédit Mutuel Arkéa a été victime (press Q&A), 4 Nov 2026. cm-arkea.com
Central News Agency (Focus Taiwan), No evidence of customer data leak in unauthorized transactions: SinoPac, 4 Nov 2026. focustaiwan.tw
Central News Agency (Focus Taiwan), SinoPac still probing unauthorized transfer of NT$40 million: FSC, 3 Nov 2026. focustaiwan.tw
The Record (Recorded Future News), Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques, 5 Nov 2026. therecord.media
Cryptopolitan, Coincheck halts crypto withdrawals, blames outside service outage not a hack, 5 Nov 2026. cryptopolitan.com
TechCrunch, North Korean hackers blamed for stealing record $6.3B in Binance breach, 30 Oct 2026. techcrunch.com
The Register, FBI pins $6.3B Binance crypto heist on North Korean hackers, 2 Nov 2026. theregister.com
Euronews, Japanese company to compensate users hit by cyberattack (GMO Internet), 26 Oct 2026. euronews.com
Finance Magnates, Five Japanese FX Brokers Confirm Hackers Placed Trades After Server Host Breach, 26 Oct 2026. financemagnates.com
American Banker, Embattled California bank is latest to fail (Nano Banc; sixth US failure of 2026), Sep 2026. americanbanker.com
Federal Deposit Insurance Corporation, press bulletin: Sunwest Bank assumes all deposits of Nano Banc, Irvine, California, 25 Sep 2026. content.govdelivery.com (FDIC)
The Nightly, NAB digital outage affects phone, internet and mobile banking across Australia as researchers warn consumers, 23 Sep 2026 (includes Primara Research outage-minute figures). thenightly.com.au
Yahoo Finance Australia (NewsWire), Two major banks hit with outages, 28 Jan 2026. au.finance.yahoo.com
Australian Prudential Regulation Authority, APRA Explains: The Financial Claims Scheme (FCS), 20 Jul 2020. apra.gov.au
Teachers Mutual Bank, What is the Financial Claims Scheme? (aggregation across brands under one licence; nominating an alternate account at a different institution). Cited as an example of how ADIs explain FCS mechanics. tmbank.com.au
Treasurer Jim Chalmers, media release, Mandating cash acceptance, Dec 2025. ministers.treasury.gov.au
Reserve Bank of Australia, Bulletin, Cash Use in Australia: What the 2025 Consumer Payments Survey Tells Us, Apr 2026. rba.gov.au
Reserve Bank of Australia, RDP 2023-08, The Evolution of Consumer Payments in Australia: Results from the 2022 Consumer Payments Survey, section 4 (Cash). rba.gov.au
Reserve Bank of Australia, Bulletin, September 2011, article on the 2010 Consumer Payments Survey (in-person cash share 74% in 2007, 68% in 2010). rba.gov.au (PDF)
Reserve Bank of Australia, Bulletin, Access to Cash in Australia, Jan 2025, pp. 1–2. rba.gov.au (PDF)
24/7 Wall St, The S&P 500 Just Had Its Worst Week Since the April 2025 Tariff Crash, 7 Nov 2026. 247wallst.com
Bloomberg (via Swissinfo), S&P 500 tumbles most since April 2025 on AI fears: markets wrap, 5 Nov 2026. swissinfo.ch
HNGN, AI Rout Spreads to Asia After S&P 500 Falls 4.4%, 6 Nov 2026 (Kospi 20-minute halt; coverage linking the sell-off to data-centre fears). hngn.com
Australian Banking Association, submission to the Senate Economics Legislation Committee on the Banking Amendment (Deposits) Bill, 10 Jul 2020. ausbanking.org.au (PDF)
Australian Citizens Party, critique of Treasury’s position on deposits and bail-in. Partisan campaign source, cited to represent the critics’ argument, not as neutral analysis. citizensparty.org.au
Know the Times (Substack), Locked Out: The Week the Money Froze, 6 Nov 2026. Cited only as an example of the “worst week since March 2020 / bear market” claim we could not support. knowthetimes.substack.com
IPSIP Vietnam, Bank cyberattacks across multiple countries: How serious is the risk?, 5 Nov 2026, summarising Aju Press (5 Nov) on South Korea. Secondary source; the Aju Press original was not opened. ipsip.vn
Associated Press (via NPR / KLCC), earlier version of Paraguay’s president is impeached minutes after resigning following a bank collapse, 5 Nov 2026 (quote from interim central bank president Pedro Acosta Bernal). klcc.org
The Financial Register (Mencari News), NAB app, internet banking and phone lines down in nationwide outage; ATMs still working, 23 Sep 2026. financialregister.com.au
BigGo Finance, Japan’s Shinkin Joint Center Outage Halts ATMs, Counters at 128 Shinkin Banks in Western Japan, 6 Nov 2026 (Seto Shinkin Bank notice on partner and convenience-store ATMs). finance.biggo.com
Investment Watch Blog, Banking shock: two major banks collapse in four days …, 5 Nov 2026. Cited only for the claims we checked. investmentwatchblog.com
Reuters (via Investing.com), Explainer: What is ueno bank and how did it trigger Paraguay’s political crisis?, 5 Nov 2026 (~US$510M outside financing; US$350M bond led by JPMorgan and Bank of America; outages at several banking apps). investing.com
Clifford Chance, Clifford Chance advises initial purchasers and joint bookrunners on Ueno Bank S.A.’s inaugural notes offering, 6 Mar 2026 (US$350M 6.700% senior notes due 2031). cliffordchance.com
N1, Serbia Central Bank revokes licence of Belgrade-based Alta Banka, 31 Oct 2026. n1info.rs
Balkan Insight, Serbia Bank Owner Arrested Following Licence Revocation, 2 Nov 2026. balkaninsight.com
Wolf Theiss, National Bank of Serbia Revokes ALTA Banka’s Banking Licence, 2 Nov 2026 (insolvency procedure; Deposit Insurance Agency as administrator). wolftheiss.com
Montenegro Business, Serbia revokes Alta Bank licence, with deposits insured up to 50,000 euros, Nov 2026 (95.18% ownership of Alta Bank Bitola; ~€2M withdrawn; temporary administration). monte.business
BTA (Bulgarian News Agency), Serbian Central Bank Revokes ALTA Banka Licence, ALTA Banka Owner Gets Arrested, Nov 2026 (North Macedonia temporary administration “does not mean closure”; Montenegro Alta Pay licence revoked). bta.bg
Srpske.rs, Alta Banka Bitola: Interim Management, 10,000 Denar Limit, 2 Nov 2026. srpske.rs
Findivoza, Serbia shuts down Alta Banka: licence revoked days after election, depositors promised up to €50,000, 5 Nov 2026. Small outlet; cited for market share (2.77%, citing Reuters), the election timing and the Serbian Association of Banks statement. findivoza.com
EVERY NUMBERED CLAIM ON THIS PAGE LINKS TO ITS SOURCE — SEE THE SOURCES LIST ABOVE.
THIS PAGE IS FOR PUBLIC INFORMATION AND COMMUNITY EDUCATION. IT IS NOT FINANCIAL, LEGAL OR INVESTMENT ADVICE, AND NOTHING HERE IS A RECOMMENDATION TO MOVE, WITHDRAW OR INVEST MONEY. FOR DEPOSIT-PROTECTION LIMITS AND ELIGIBILITY, CHECK APRA AND YOUR OWN BANK. IT PRESENTS A POINT OF VIEW ALONGSIDE THE PUBLIC RECORD, LABELS OUR INFERENCES, AND FLAGS WHERE CLAIMS ARE CONTESTED OR STILL DEVELOPING. THIS IS JOURNALISM. THIS IS INFORMATION. WHAT YOU DO WITH IT IS YOUR CHOICE.