BNF Bank Malta has brought most of its digital banking services back online after a multi-day disruption that blocked customers from making outward payments and logging into their accounts, but international users may still face intermittent connectivity problems as restoration work wraps up.
Why This Matters
• Payment delays: Customers attempting to initiate outward transfers through eBNF experienced temporary blocks starting August 3.
• Geographic friction: Users accessing online banking from outside Malta are still reporting intermittent login or connectivity issues as of August 4.
• Pattern of instability: This marks the second major technical failure in approximately 16 months, following a €1M system meltdown in March 2025 that triggered regulatory scrutiny.
What Happened During the Outage
The disruption began over the weekend and into early this week, affecting core functions of BNF Bank's eBNF internet banking platform. Customers reported being unable to process payments, with particularly acute problems for those attempting to send money abroad or access their accounts while traveling outside Malta.
The bank acknowledged the issues on August 3, warning that transfers and payments made through Internet Banking could be delayed. By the following day, BNF announced that difficulties had been "largely resolved" and that services were returning to normal capacity. However, the institution cautioned that customers logging in from international locations might still encounter sporadic connectivity problems as final restoration efforts continue.
While the bank has not disclosed the root cause in detail, it indicated the disruption may have been linked to one of its technology partners—a signal that the fault lay not within BNF's core infrastructure but in a third-party dependency. For customers needing urgent payment processing during the disruption, the bank directed them to contact its Customer Care team directly at +356 2111 1111 or visit their nearest branch rather than rely on digital channels.
The 2025 System Crisis: Context for Current Concerns
This week's incident inevitably brings back memories of a more severe crisis. In March and April 2025, BNF Bank experienced a significant failure during a major core banking system upgrade. The rollout encountered serious problems, leaving customers locked out of accounts, unable to make payments, and struggling to activate new cards for several weeks. Some issues persisted intermittently for months.
The timing presented additional challenges: the bank simultaneously switched card providers from Visa to Mastercard, a decision its CEO later characterized as not optimal given the circumstances. One of the bank's key service providers experienced technical issues during the launch, contributing to the disruption.
The incident had lasting consequences. BNF reportedly spent more than €1M stabilizing services following the upgrade. The Malta Financial Services Authority (MFSA) became engaged in assessing the bank's response. Subsequently, in March 2026, the Financial Intelligence Analysis Unit (FIAU) imposed a €69,000 fine on BNF for reporting delays caused directly by the 2025 system failure.
Impact on Residents and Businesses
For retail customers and businesses banking with BNF, the disruption raises practical concerns about service reliability during critical payment windows. Many Maltese residents rely on online banking for recurring bill payments, international remittances, and salary transfers. A multi-day outage during the first week of the month—when rent, utilities, and payroll obligations typically fall due—can disrupt payment schedules.
Payment Delays and Business Operations
Customers traveling abroad or living outside Malta while maintaining accounts faced additional friction during the disruption. The bank's warning that international login issues may persist means expatriates and frequent travelers could experience ongoing access challenges even as domestic services stabilize.
For small businesses dependent on outward payments to suppliers or payroll processors, the disruption could have delayed operations, particularly for those without backup banking arrangements. While BNF branches remained operational as an alternative, the inconvenience of in-person transactions undermines the efficiency that digital banking is intended to provide.
International Access Challenges
Beyond business operations, Maltese residents with international obligations—whether remitting funds to family abroad, making overseas purchases, or managing accounts while traveling—experienced specific friction during the disruption. The extended issues for international users highlight the importance of robust vendor management when critical banking functions depend on technology partners.
How BNF Compares to Other Maltese Banks
BNF's service disruptions are not unique in Malta's banking sector, though the frequency warrants attention. Bank of Valletta (BOV), the country's largest bank, experienced a high-profile cyberattack in February 2019 when hackers attempted to steal €13M through fraudulent international payments. BOV's response was comprehensive: the institution shut down all systems, including branches, ATMs, and digital channels, to contain the threat. While this created a total disruption, services resumed within hours. BOV assured customers that no funds were lost, with fraudulent transactions reversed.
In contrast to BNF's digital-only disruption, BOV's 2019 incident affected the entire banking operation. More recently, in April 2026, BOV suffered a one-day technical outage that disrupted internet banking and mobile apps. Services were restored within 24 hours.
The key distinction lies in causation and response capability. BOV's 2019 incident was a malicious external attack—a security breach requiring defensive action. BNF's failures have been internal operational challenges tied to system transitions and technology partner dependencies. BOV's recovery speed in both incidents suggests strong operational frameworks and vendor management protocols.
Industry Standards and Regulatory Expectations
Banking regulators globally, including the Malta Financial Services Authority, expect institutions to adhere to rigorous operational resilience frameworks. These include:
• Critical function mapping: Identifying every technology, vendor, and process that supports essential services.
• Impact tolerance thresholds: Defining acceptable downtime limits for each critical function.
• Scenario testing: Regular stress tests and disaster recovery simulations to validate response plans.
• Third-party risk management: Ensuring that vendors and technology providers meet the same resilience standards as the bank itself.
The European Union's Digital Operational Resilience Act (DORA) has established a comprehensive ICT risk management framework for financial institutions and their third-party providers. BNF's reliance on a technology partner during this week's disruption underscores the critical importance of robust vendor oversight and redundancy planning.
Best practices emphasize redundancy and backup systems, so that if one component fails, another can seamlessly take over. Cloud-based architectures, API-driven integration, and real-time monitoring with predictive analytics are increasingly considered essential capabilities for modern banking infrastructure.
What the Bank Is Saying
BNF Bank issued an apology for the inconvenience caused by the service interruptions and emphasized that customer funds remained secure throughout the disruption. The institution has not provided a detailed post-mortem or comprehensive timeline for when international users can expect full connectivity restoration.
The bank's communication during the incident was reactive, with updates coming primarily after customer concerns surfaced publicly. More proactive communication—including regular status updates, estimated restoration times, and clear explanations of underlying causes—would have provided greater transparency.
The Path Forward
For BNF, the critical question is whether this week's disruption represents an isolated incident or reflects deeper structural challenges in its digital infrastructure. The 2025 system upgrade complications and subsequent regulatory fine already placed the institution under scrutiny. A second significant incident within approximately 16 months will naturally prompt questions about whether the bank has adequately invested in operational resilience and technology partner oversight.
For customers, particularly those with international payment obligations or frequently traveling abroad, maintaining banking relationships with multiple institutions can provide flexibility during service disruptions.
Regulators at the MFSA are monitoring developments. Should this incident involve negligence in technology partner oversight or suggest inadequate implementation of lessons from 2025, further regulatory action may follow. For now, the majority of services have been restored—though the pattern suggests underlying infrastructure challenges may warrant continued attention from both the bank and its regulators.
