Charities remain locked out of CAF Bank online accounts
A week after suspending online banking, CAF Bank still has no timetable for restoring access to its 14,000 UK charity customers.
The bank updated customers on Thursday about the outage, which has disrupted payments to staff and suppliers.
Little had changed. In a message seen by The Register, CAF Bank said it was not yet able to restore the service safely.
REG AD
As it had earlier in the week, the bank said it detected attempted fraud on some accounts and acted quickly to stop it. Its investigation uncovered a previously unknown vulnerability in the connection between its systems and third-party software. CAF Bank said its technical team was working around the clock with suppliers and external experts on a fix.
REG AD
The Register understands that no timetable has been set for restoring online banking.
Earlier this week, CAF Bank CEO Alison Taylor apologized for the disruption. "The core bank is not affected. We are acutely aware of the impact this has on our customers and want this to be fixed as soon as possible, but we cannot restore access to the online service until we are assured the issue is safely resolved," she said.
Since The Register first reported the story earlier this week, the BBC has spoken to charities struggling to make essential payments, including payroll.
MORE CONTEXT
- Bank for charities pulls online services over security fears
- MFA-optional banks leave safe doors (and accounts) wide open for thieves to pillage
- Canadian utility fesses up to data breach, but key details remain off-grid
- US bank reports itself after slinging customer data at 'unauthorized AI app'
-
security DEF CON bans Meta-style 'pervert glasses'
-
software Techie lured out of retirement to support software only he remembered
-
security Word worm crawls into Copilot, spreads chaos
-
DATABASES After rewriting SQLite in Rust, Turso turns its sights on Postgres
-
AI and ML Closed models refuse to help researcher swat Linux bug - SYSTEMS A deep dive into Nvidia's Vera CPU and the Olympus cores that power it 88 custom cores, 176 funky threads, 1.5 TB of laptop RAM, and 1.8 TB/s of NVLink connectivity — this isn't your typical datacenter chip
- OFF-PREM Enterprise cloud infrastructure uptake shows no sign of slowing Cloud revenue now north of $143 billion a quarter, and growth is accelerating
- DEVOPS Dev who gave HashiCorp its name returns with a faster terminal multiplexer Persistent sessions could be just the beginning
- SECURITY Anthropic and OpenAI are competing to see whose agents can go rogue harder Whoever wins, we lose
- SYSTEMS UK wants datacenters to pay a fee for grid connection requests Refundable charge intended to discourage time wasters from filing applications that will never be realized
- Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
- Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
- Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
- Security EQT buys majority share in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
- Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career
- FOSS smashed one Microsoft monopoly. After 20 years of failure, it's time to smash another Word up
- GNOME can look like Windows – and Flashback can do it without extensions New 'Simple-taskbar' is an option, but there's a simpler, stabler way
- A moment of silence, please, for the final release of Debian on x86-32 New Debian versions hit FOSSland in the form of 13.6 and 12.15
- Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites Flaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide
- Frame: A new X11 server – implemented directly in assembly Joins yserver, Phoenix, and of course XLibre – and outlier Arcan
- Cinnamon 6.8 will support Wayland – if you want it Next version of Linux Mint’s desktop has both kinds of display server
Kevan Hodges, chief executive of Down's syndrome charity 21 Together, told the BBC the outage was "appalling."
"People are concerned that wages won't get paid because of this, and that's just stressful when they have bills to pay. My team have wasted days trying to get through to \[CAF Bank\], but all in vain," he said.
Bali Rodgers, chief executive of Safer Communities Alliance, told the BBC the grassroots organizations it represents were slowly losing trust in the bank.
CAF Bank also came under fire last year after the introduction of a new banking platform left customers unable to log in or make transactions. The bank later apologized but has not disclosed how much it spent on the system.
CAF Bank held £1.45 billion ($1.93 billion) in customer deposits at the end of its 2024/25 financial year. ®
[](https://www.facebook.com/sharer.php?u=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fcharities-remain-locked-out-of-caf-bank-online-accounts%2F5281711) [](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fcharities-remain-locked-out-of-caf-bank-online-accounts%2F5281711) [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fcharities-remain-locked-out-of-caf-bank-online-accounts%2F5281711) [](https://bsky.app/intent/compose?text=Charities%20remain%20locked%20out%20of%20CAF%20Bank%20online%20accounts%0Ahttps%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fcharities-remain-locked-out-of-caf-bank-online-accounts%2F5281711) [](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fcharities-remain-locked-out-of-caf-bank-online-accounts%2F5281711&title=Charities%20remain%20locked%20out%20of%20CAF%20Bank%20online%20accounts) [](https://api.whatsapp.com/send?text=Charities%20remain%20locked%20out%20of%20CAF%20Bank%20online%20accounts%0Ahttps%3A%2F%2Fwww.theregister.com%2Fsecurity%2F2026%2F07%2F31%2Fcharities-remain-locked-out-of-caf-bank-online-accounts%2F5281711)
REG AD