What dominates the section
- Market volatility, funding access, credit losses, and asset valuations dominate Bank of America’s financial risks.
- Operational threats include cyberattacks, technology failures, data errors, model weaknesses, litigation, and regulatory requirements.
- Mortgage exposure spans housing affordability, GSE dependence, servicing obligations, and climate-related property risks.
The risks most specific to Bank of America
We may be adversely affected by weaknesses in the U.S. housing market
Higher mortgage rates and home prices are reducing housing affordability and demand for Bank of America’s mortgage products.
Our derivatives businesses may expose us to unexpected risks, which may result in losses and adversely affect liquidity
Large derivatives activities expose Bank of America to unexpected market, credit, operational, and liquidity losses.
machine learning and generative AI) and robotics, increases our cybersecurity risks and exposure, including by making fraud detection and authentication more difficult
Cyberattacks, including increasingly sophisticated AI-enabled attacks, may defeat fraud detection and customer authentication controls.
Failure to satisfy our obligations as servicer for residential mortgage securitizations, loans owned by other entities and other related losses could adversely impact our reputation, servicing costs or results of operations
Servicing residential mortgages for securitizations and other owners creates termination, servicing-cost, loss, and reputational risks.
Changes in the structure of and relationship among the GSEs could adversely impact our business
Changes to Fannie Mae and Freddie Mac, which purchased approximately $1.5 billion of Bank of America loans in 2024, could disrupt mortgage activity.
Bank of America Corporation is a holding company, is dependent on its subsidiaries for liquidity and may be restricted from transferring funds from subsidiaries
Legal and regulatory restrictions may prevent subsidiaries from transferring liquidity to Bank of America Corporation when the parent needs funds.
Bank of America Corporation’s liquidity and financial condition, and the ability to pay dividends and obligations, could be adversely affected in the event of a resolution
A resolution of Bank of America Corporation could impair parent liquidity, financial condition, dividend capacity, and ability to meet obligations.
U.S. federal banking agencies may require increased capital and liquidity levels, which could adversely impact the Corporation
U.S. banking agencies could require higher capital and liquidity ratios, constraining Bank of America’s balance sheet and returns.
Failure to properly manage data may adversely affect our ability to manage compliance risk and business needs, and result in errors in our operations, reporting and decision-making, and non-compliance with LRRs
Inaccurate, incomplete, or delayed data could cause operational errors, weaken compliance, and impair reporting and risk decisions.
Our operations, businesses and clients could be adversely affected by the impacts related to climate change
Floods, wildfires, hurricanes, tornadoes, rising temperatures, and sea levels could harm clients, operations, and financial results.
All 32 risk factors
Headings as the filing states them, in filing order.
Other
- 01We may be adversely affected by the financial markets, fiscal, monetary, and regulatory policies, and economic conditions
- 02macroeconomic conditions, as well as result in additional market volatility and disruptions and recessionary risk
- 03Increased market volatility and adverse changes in financial or capital market conditions may increase our market risk
- 04If asset values decline, we may incur losses and negative impacts, including to capital and liquidity requirements
- 05If we are unable to access the capital markets, have prolonged net deposits outflows, or our borrowing costs increase, our liquidity and competitive position will be negatively affected
- 06Reduction in our credit ratings could limit our access to funding or the capital markets, increase borrowing costs or trigger additional collateral or funding requirements
- 07Bank of America Corporation is a holding company, is dependent on its subsidiaries for liquidity and may be restricted from transferring funds from subsidiaries
- 08pay dividends or make payments to us may adversely affect our cash flow, liquidity and financial condition
- 09Bank of America Corporation’s liquidity and financial condition, and the ability to pay dividends and obligations, could be adversely affected in the event of a resolution
- 10Economic or market disruptions and insufficient credit loss reserves may result in a higher provision for credit losses
- 11Our concentrations of credit risk could adversely affect our credit losses, results of operations and financial condition
- 12could lead to market-wide liquidity disruptions, losses, defaults and related disputes and litigation
- 13We may be adversely affected by weaknesses in the U.S. housing market
- 14Our derivatives businesses may expose us to unexpected risks, which may result in losses and adversely affect liquidity
- 15We are subject to numerous political, economic, market, reputational, operational, compliance, legal, regulatory and other risks in the jurisdictions in which we operate
- 16A failure in or breach of our operations or information systems, or those of third parties or the financial services industry, could cause disruptions, adversely impact our businesses, results of operations and financial condition, and cause legal or reputational harm
- 17Our operations and information systems and components thereof, and those of our third parties, have been, and in the
- 18machine learning and generative AI) and robotics, increases our cybersecurity risks and exposure, including by making fraud detection and authentication more difficult
- 19Failure to satisfy our obligations as servicer for residential mortgage securitizations, loans owned by other entities and other related losses could adversely impact our reputation, servicing costs or results of operations
- 20Changes in the structure of and relationship among the GSEs could adversely impact our business
- 21Our risk management framework may not be effective in mitigating risk and reducing the potential for losses
- 22We are subject to significant financial and reputational risks from potential liability arising from lawsuits and regulatory and government action
- 23U.S. federal banking agencies may require increased capital and liquidity levels, which could adversely impact the Corporation
- 24Changes in accounting standards or assumptions in applying accounting policies could adversely affect us
- 25Damage to our reputation could harm our businesses, including our competitive position and business prospects
- 26We face significant and increasing competition in the financial services industry
- 27Our inability to adapt our business strategies, products and services could harm our business
- 28widespread health emergencies or pandemics, cyberattacks, and military conflicts or other significant geopolitical events
- 29We could suffer operational, reputational and financial harm if our models fail to properly anticipate and manage risk
- 30Failure to properly manage data may adversely affect our ability to manage compliance risk and business needs, and result in errors in our operations, reporting and decision-making, and non-compliance with LRRs
- 31Our operations, businesses and clients could be adversely affected by the impacts related to climate change
- 32Our ability to attract, develop and retain qualified employees is critical to our success, business prospects and competitive position
Other Bank of America 10-Ks
- 2026 10-K risk factors
34 risks, 7 new, 5 dropped, 19 reworded since the prior year. New risks emphasize subsidiary funding constraints, cross-border fragmentation, third-party operational and cybersecurity vulnerabilities, and evolving regulation.
Filed Feb 25, 2026
About this page
Item 1A of the 10-K on EDGAR was split into its risk factors and, where the company's previous 10-K is on file, each heading was matched to last year's and the text compared word for word. The headings are the filing's own. The one-line readings and the overview were written by a language model from the text of the new, dropped, and rewritten risks; they refer to risks by position and cannot misquote a heading.