Banking supervision is designed to be risk-based and proportionate. FINMA’s supervisory focus in 2025 was on Credit Suisse’s integration into UBS, and at other banks on the effectiveness of corporate governance, risk culture, compliance with conduct rules, in particular combating money laundering and the banks’ handling of sanctions, the mortgage lending business and cyber risks.
To intensify its supervision, FINMA conducted an increased number of deep dives in 2025, maintaining direct contact with boards of directors, executive boards, compliance and risk management functions and internal audit departments. A focus of these visits were the topics of corporate governance, risk management, risk culture and gaining a deeper understanding of business models.
Measures taken when deficiencies were identified
FINMA identified some serious deficiencies in the course of its ongoing supervision. It called on the banks concerned to remedy the shortcomings without delay. As a direct result of its ongoing supervision, FINMA imposed an institution-specific capital add-on in 14 cases and a restriction on business activity and a ban on takeovers in 7 cases, among other requirements. A total of 16 cases resulted in preliminary investigations. Enforcement proceedings were launched in 15 cases. In 18 cases, FINMA appointed an independent auditor.
To improve the effectiveness of its supervisory activities, FINMA also took action at an earlier stage when deficiencies were identified, imposing supervisory measures more consistently and more systematically, and enforcing these measures. In the case of enforcement proceedings, for example, it increasingly focused on immediate measures and tougher requirements when proceedings were opened, as opposed to exclusively ordering measures when proceedings were concluded.
Supervision of UBS continues to be dominated by the integration of CS
In 2025, the ongoing supervision of UBS was again dominated by the integration of the former Credit Suisse (CS). After the integration work in 2024 had centred on combining the most important legal entities in Switzerland and abroad, the focus in 2025 was on the technical and operational integration of business activities and processes.
FINMA closely monitored the migration of former CS customers to UBS systems and reviewed the technical implementation with the support of an external third party. The migration of customers not booked in Switzerland was completed in 2025. Due to the high number of customers booked in Switzerland, their migration is scheduled to continue into 2026.
Other focal points of supervisory activity were risk-related aspects. These include the appropriate assessment of non-financial risks related to CS customers transferred to UBS, the continuous reduction of risks from CS business that UBS intends to exit, and the full integration of risk management and reporting. Beyond the issues of integration, supervision of the bank’s suitability framework was strengthened in particular to ensure investor protection against the backdrop of the bank’s business model and global orientation, as well as general market trends towards partially illiquid and less transparent investment instruments (e.g. private markets, digital assets). Similarly, the particularly risk-exposed business activities of investment banking – namely corporate and leverage lending as well as prime brokerage – were subject to increased supervisory focus.
FINMA was also responsible for the supervisory assessment of the further standardisation and simplification of UBS’s global legal and operational structures, as well as operational resilience in light of data migration and the subsequent retirement of IT applications that are no longer being used. FINMA will monitor the most important steps in the integration of CS into UBS through to its completion. Here, too, there was a substantial increase in supervision beyond integration-specific aspects. In view of the high potential tail risks associated with new technologies, FINMA placed particular emphasis on assessing the maturity of the bank’s own management of cyber risks and risks associated with third-party providers.
Focus of on-site inspections: banks
In the year under review, on-site inspections at banks focused on the key points of FINMA’s supervisory activity, as described in the 2025 Risk Monitor. In particular, on-site inspections were conducted on the topics of corporate governance, risk management and risk culture in the areas of combating money laundering, mortgage lending and cyber risks. In some cases, FINMA identified serious deficiencies. It called on the banks concerned to remedy the shortcomings without delay. FINMA took a large number of measures as a direct consequence of these on-site inspections (see the “Measures taken when deficiencies were identified” subsection).
FINMA conducted a total of 113 on-site inspections at banks, mostly at institutions in categories 1 to 3. Five more on-site inspections were carried out at banks in supervisory categories 4 and 5 than in previous years, mainly at institutions with increased risks. The on-site inspections resulted in over 500 findings, which FINMA used to derive recommendations for the banks concerned. It closely monitored the implementation of the recommendations and compliance with the deadlines it had set. Where necessary, FINMA conducted follow-up on-site inspections to ensure that the recommendations had been implemented appropriately.
On-site inspections were once again carried out at banks’ outsourcing partners too. Inspections were also performed at subsidiaries and branches of supervised institutions abroad, either by FINMA alone or jointly with foreign supervisory authorities. Conversely, FINMA supported foreign financial market supervisory authorities in their direct on-site inspections in Switzerland.