After a string of digital banking outages in 2023, the Monetary Authority of Singapore came down hard on DBS, the country's largest bank, raising its operational-risk capital requirement to approximately S$1.6 billion and barring it from non-essential IT changes and acquisitions for six months. The penalties followed a year in which customers were repeatedly locked out of their accounts: a day-long disruption on March 29 knocked out digibank online and mobile services, DBS Vickers trading and PayLah!, followed by another outage on May 5 from noon to 3.10pm, with further incidents affecting payments in September and October.
MAS had already imposed an additional S$930 million capital requirement on DBS in February 2022 after a November 2021 outage. The new action raised the multiplier on the bank's risk-weighted assets for operational risk to 1.8 times, from 1.5 times previously, translating to about S$1.6 billion in total additional regulatory capital. The regulator called the repeated inconvenience to the public unacceptable and said the bank had fallen short of expectations for reliable service. From November 2023 to April 2024, DBS was prohibited from undertaking non-essential IT modifications or new acquisitions, and from reducing its branch and ATM network. MAS also directed the bank to conduct a comprehensive review of management oversight, staff competencies, operational processes, system resiliency and architecture design, overseen by a special board committee with an independent external expert.
Chief executive Piyush Gupta apologised, saying the bank was deeply sorry and acknowledging that its digital transformation push had to be matched by better delivery. DBS set aside a special S$80 million budget to enhance system resiliency, set new service-availability targets, and pledged to recover key services within three hours of any disruption. In an unusual step, Gupta took a 30 percent pay cut amounting to S$4.1 million, with the management committee taking a collective 21 percent reduction, as the leadership accepted accountability for the prolonged failures.
The saga did not end with the lifting of the six-month ban in April 2024: within days, DBS suffered another disruption to its internet banking and payment services, though services were restored within hours. MAS kept the heightened 1.8-times multiplier in place, saying it would only be lifted when satisfied with the bank's reliability. The episode became a defining case study in the risks of digital banking at scale, and a warning to the industry that regulators would treat repeated outages not as technical glitches but as failures of governance.