The Bank for Charities withdrew its online services on July 28, 2026, after identifying security vulnerabilities within its digital systems [1].
The outage disrupts the financial operations of thousands of non-profit entities, potentially delaying critical funding and time-sensitive payments during a period of heightened cybersecurity risks.
A spokesperson for the Bank for Charities said, "We've identified vulnerabilities in our online systems that require immediate attention" [1]. The institution has not specified the exact nature of the vulnerabilities or whether a breach has already occurred.
Because the digital platforms are unavailable, a source said that approximately 14,000 organizations [1] may now need to rely on phone-based payments for time-sensitive transactions. This shift to manual processing significantly increases the administrative burden on charities and slows the movement of capital.
The bank is a UK institution that serves a specialized sector of the economy, non-profits and charitable trusts, which often lack the robust IT infrastructure of larger commercial firms. The sudden loss of online access forces these organizations to revert to legacy communication methods to manage their accounts.
Bank officials have not provided a timeline for when the online services will be restored. The move comes as financial institutions increase scrutiny of third-party vulnerabilities to prevent systemic failures in the banking sector.
“"We've identified vulnerabilities in our online systems that require immediate attention."”
The suspension of services highlights the fragility of specialized financial infrastructure and the immediate operational risk charities face when digital tools are compromised. By forcing 14,000 organizations to move to phone-based transactions, the bank has created a bottleneck that could delay humanitarian aid and essential services, underscoring the need for redundant payment systems in the non-profit sector.
