Finance
How a string of bad loans has bank investors hunting for hidden risks
Signage outside Western Alliance Bank headquarters in Phoenix, Arizona, March 13, 2023.
Caitlin O’Hara | Bloomberg | Getty Images
Big banks including JPMorgan Chase and Goldman Sachs had just finished taking victory laps after a blockbuster quarter when concerns emerged from an obscure corner of Wall Street, sending a collective shiver through global finance.
Regional bank Zions late Wednesday disclosed a near total wipeout on $60 million in loans after finding “apparent misrepresentations” from the borrowers. The next day, peer Western Alliance said that it had sued the same borrower, a commercial real estate firm called the Cantor Group, for alleged fraud.
The result was a sudden and deep selloff among regional banks, drawing comparisons to the churn of the 2023 banking crisis that consumed Silicon Valley Bank and First Republic. This time around, investors are focused on a specific type of lending made by banks to non-depository financial institutions, or NDFIs, as the source of possible contagion.
“When you see one cockroach, there are probably more,” JPMorgan CEO Jamie Dimon said this week. “Everyone should be forewarned on this one.”
Concerns over credit quality had been simmering for weeks after the September collapse of two U.S. auto-related companies. JPMorgan, the biggest U.S. bank by assets, this week reported a $170 million loss tied to one of them, the subprime auto lender Tricolor.
But it wasn’t until a third case of alleged fraud around loans made to NDFIs that investors were jolted into fearing the worst, according to Truist banking analyst Brian Foran.
“You now have had three situations where there was alleged fraud” involving NDFIs, Foran said.
Dimon’s comments “really resonated with people who were like, ‘Oh, man, the tide went out a little bit, and now we’re seeing who was lacking their swim trunks,” Foran said.
What are NDFIs?
The episode cast a spotlight on a fast-growing category of loans made by regional banks and global investment banks alike. Rules put into place after the 2008 financial crisis discouraged regulated banks from making many types of loans, from mortgages to subprime auto, leading to the rise of thousands of non-bank lenders.
Moving riskier activities outside of the regulated bank perimeter, where failures are backstopped by the Federal Deposit Insurance Corporation, seemed like a good move.
But it turns out, banks are a major source of funding for non-bank lenders: commercial loans to NDFIs reached $1.14 trillion as of March, per the Federal Reserve Bank of St. Louis.
Bank loans made to non-bank financial firms were the single fastest-growing category, rising 26% annually since 2012, according to the St. Louis Fed.
“The surge in NDFI lending was really because all these different regulations added up to say there are a bunch of loans banks can’t do anymore, but if they lend to someone else who does them, that’s OK,” Foran said.
“We really don’t know much about these NDFI books,” Foran said. “People are saying, ‘I didn’t know it was so easy for a bank to think they had $50 million in collateral and find out they had zero.'”
‘Overreaction’ or early?
Part of what’s spooking investors is that, while some of the loan losses disclosed by regional banks have been relatively small, they’ve been near total wipeouts, said KBW bank analyst Catherine Mealor.
“NDFI lending, because of the collateral involved, typically has a higher loss rate, and the losses can come very quickly and out of nowhere,” Mealor said. “It’s really hard to wrap your mind around these risks.”
Mealor said investors have been inundating her with questions around the level of NDFI exposures in her coverage universe, the analyst said. Western Alliance has a relatively high proportion of them, she noted.
Still, regional banks are benefitting from an improving interest rate environment and rising mergers activity, which underpin valuations, Mealor said, adding she thinks this week’s stock selloff was an “overreaction.”
“You want to avoid companies that show up high in the screen for NDFI loans,” she said. “There are plenty of high-quality companies in the KRX that are trading at a massive discount.”
Cybersecurity and enterprise software stocks have been market dogs in 2026, with fears that AI will wipe out a wide range of companies in the enterprise space dominating the narrative. But they snapped a brutal losing streak this past week, joining in the broader market rally that saw all losses from the U.S.-Iran war regained by the Dow Jones Industrial Average and S&P 500.
Cybersecurity has been “a victim of some of the AI-related headlines,” Christian Magoon, Amplify ETFs CEO, said on this week’s “ETF Edge.”
It wasn’t just niche cybersecurity names. Take Microsoft, for example, which was recently down close to 20% for the year. Its shares surged last week by 13%.
A big driver of the pummeling in software stocks was a rotation within tech by investors to AI infrastructure and semiconductors and some other names in large-cap tech, Magoon said, and since cybersecurity stocks and ETFs are heavily weighted towards software companies, they were left behind even as those businesses continue to grow on a fundamental basis.
But Wall Street now has become more bullish with the stocks at lower levels. Brent Thill, Jefferies tech analyst, said last week that the worst may be over for software stocks. “I think that this concept that software is dead, and then Anthropic and OpenAI are going to kill the entire industry, is just over-exaggerated,” he said on CNBC’s “Money Movers” on Wednesday.
“Big Short” investor Michael Burry wrote in a Substack post on Wednesday that he is becoming bullish about software stocks after the recent selloff. “Software stocks remain interesting because of accelerated extreme declines last week arising from a reflexive positive feedback loop between falling software stocks and changes in the market for their bank debt,” he wrote.
The Global X Cybersecurity ETF (BUG), is down about 12% since the beginning of the year, with top holdings including Palo Alto Networks, Fortinet, Akamai Technologies and CrowdStrike. But BUG was up 12% last week. The First Trust NASDAQ Cybersecurity ETF (CIBR) is down 6% for the year, but up 9% in the past week.
Piper Sandler analyst Rob Owens reiterated an “overweight” rating on Palo Alto Networks which helped the stock pop 7% — it is now down roughly 6% on the year. Its peers saw similar moves, including CrowdStrike.
Performance of Global X cybersecurity ETF versus S&P 500 over past one-year period.
Magoon said expectations may have become too high in cybersecurity, and with a crowding effect among investors, solid results were not enough to to push stocks higher. But the down-and-then-back-up 2026 for the sector is also a reminder that when stocks fall sharply in a short period of time, opportunity may knock.
“Once you’re down over 10% in some of these subsectors, you start to see the contrarians start to say, ‘well, maybe I’ll take a look at this,'” Magoon said.
He said AI does add both opportunity and uncertainty to the cybersecurity equation, increasing demand but also introducing new competition. But he added, “I think the dip is good to buy in an AI-driven world,” specifically because the risks to companies may lead to more M&A in cyber names that benefits the stocks.
For now, investors may look for opportunity on the margins rather than rush back into beaten-up tech names. “I think investors are still going to remain underweight software,” Thill said.
But Magoon advises investors to at least take the reminder to keep an eye on niches in the market during pronounced downturns. “The best-performing are often the least bought and do the best over the next 12 months versus late-in-the-game piling on,” he said.
While that may have been a mindset that worked against the last investors into cybersecurity and enterprise software in mid-2025 when the negative sentiment started building, at least for now, it’s started working for the stocks in the sector again.
Meanwhile, this year’s biggest winner is also a good example of what can be an extended trade in either a bullish or bearish direction. Last year, institutional ownership of energy was at multi-year lows, Magoon said, referencing Bank of America data. “Reverse sentiment can be a great indicator,” he said.
But he cautioned that any selective buying of stocks that have dipped does have to contend with the risk that there is a potentially bigger drawdown in the market yet to come in 2026. That is because midterm election years historically have been marked by large drawdowns. “If you think it is bad right now, it could get a lot worse,” Magoon said. But he added that there’s a silver-lining in that data, too, for the patient investor. The market has posted very strong 12-month returns after midterm election drawdowns end. So, for investors with a longer-term time horizon and no need for short-term liquidity, Magoon said, “stick in there.”
Sign up for our weekly newsletter that goes beyond the livestream, offering a closer look at the trends and figures shaping the ETF market.
New innovation in the exchange-traded fund industry could come at a cost to investors during extreme conditions.
According to MFS Investment Management’s Jamie Harrison, ETFs involved in increasingly complex derivatives and less transparent markets may be in uncharted territory when it comes to violent downturns.
“Those would be something that you’d want to keep an eye on as volatility ramps up,” the firm’s head of ETF capital markets told CNBC’s “ETF Edge” this week. “As innovation continues to increase at a rapid pace within the ETF wrapper, [it’s] definitely something that we advise our clients to be really front-footed about… Lack of transparency could absolutely be an issue if we’re going to start seeing some deep sell-offs.”
His firm has been around since 1924 and is known for inventing the open-end mutual fund. Last year, ETF.com named MFS Investment Management as the best new ETF issuer.
“It’s important to do due diligence on the portfolio,” he said. “Having a firm that has deep partnerships, deep bench of subject matter experts that plays with the A-team in terms of the Street and liquidity providers available [are] super important.”
Liquidity as the real issue?
Harrison suggested the real issue is liquidity, particularly during a steep sell-off.
“We’ve all seen the news and the headlines around potential private credit ETFs. That picture becomes much more murky,” he added. “It’s up to advisors, to investors [and] to clients to really dig in and look under the hood and engage with their issuers.”
He noted investors will have to ask some tough questions.
“What does this look like in a 20% drawdown? How does this liquidity facility work? Am I going to be able to get in? Am I going to be able to get out? And if I’m able to get out, am I able to get out at a price that’s tight to NAV [net asset value], and what’s the infrastructure at your shop in terms of managing that consideration for me,” said Harrison.
Amplify ETFs’ Christian Magoon is also concerned about these newer ETF strategies could weather a monster drawdown. He listed private credit as a red flag.
“If your ETF owns private credit, I think it’s worth taking a look at, kind of what the standards are around liquidity and how that ETF is trading, because that should be a bit of a mismatch between the trading pace of ETFs and the underlying asset,” the firm’s CEO said in the same interview.
Magoon also highlighted potential issues surrounding equity-linked notes. The notes provide fixed income security while offering potentially higher returns linked to stocks or equity indexes.
“Those could potentially be in stress due to redemptions and the underlying credit risk. That’s another kind of unique derivative,” Magoon said. “I would very closely look at any ETF that has equity-linked notes should we get into a major drawdown or there be a contagion in private credit or something related to the banking system.”
What that means for consumer loans
Checks and Balance newsletter: Of God and MAGA
Why software stocks, 2026’s market dogs, have joined the rally
Armanino adds Strategic Accounting Outsourced Solutions
New 2023 K-1 instructions stir the CAMT pot for partnerships and corporations
