Filing summary
Business context and reporting period: Itaú Unibanco Holding S.A.’s 6-K, dated October 2, 2026, contains public-access reports describing risk-management policies across the group. It is a governance and policy disclosure, not a financial-results report. The policies apply generally to the holding company, controlled entities and, where specified, international units. Approval dates range from April 2024 to September 2026.
Financial and risk metrics
- Financial performance: The filing provides no revenue, profit, cash flow, margin, debt balance or actual liquidity or capital ratio figures. It therefore does not establish financial performance for a comparable prior period.
- Capital requirements: The capital policy lists regulatory minimum ratios of 4.5% for Common Equity Tier 1, 6.0% for Tier 1 and 8.0% for total capital. It also states Common Equity Tier 1 plus the additional capital buffer (ACP) of 8.06% and total capital plus ACP of 11.56%. These are framework requirements, not Itaú’s reported actual ratios.
- Capital-buffer detail: The displayed ACP breakdown is unclear or internally inconsistent: the text lists 3.56%, 2.50%, 0.06% and 1.00% across the buffer and its components, while also saying the countercyclical buffer is currently zero. The filing text does not provide a clear reconciliation.
- Liquidity: The policy describes daily cash-flow monitoring and measures including LCR, NSFR, funding concentration and stress scenarios, but provides no actual ratio or liquidity-balance values.
- Credit and market risk: The policies describe monitoring, limits, stress testing, model validation and reporting. No portfolio exposures, provisions, losses, market-risk measures or limit utilization figures are provided.
Material policy disclosures and changes
- Social, environmental and climate risk: The policy integrates these risks into traditional risk disciplines and considers financial, reputational and legal impacts. It provides for probability-and-severity assessment, sector and geographic concentration monitoring, potential exposure limits, climate stress testing, and due diligence of clients, credit operations, suppliers and the bank’s own operations. Approved by the Board in May 2026.
- Credit risk: The policy sets out an integrated credit-risk lifecycle, independent risk control, credit policies, ratings, collateral assessment, problem-asset treatment and stress testing. It specifically covers counterparty, country, concentration, and social, environmental and climate risks. Concentration indicators are monitored through governance forums; the policy describes monthly reporting for specified indicators. Approved in September 2026.
- Capital management: The policy describes ICAAP, capital planning, contingency actions, stress testing, and recovery and orderly resolution planning. Capital plans incorporate at least three years of projections under normal and stress scenarios. The recovery and orderly resolution plan is reviewed every two years or as required by the regulator. Approved in September 2026.
- Liquidity risk: The policy covers controlled financial entities in Brazil and abroad, excluding client portfolios managed or administered by the bank. It describes contingency, recovery and orderly resolution plans and cash-flow scenarios, including foreign-currency portfolio run-off and social-media monitoring. Approved in May 2026.
- Compliance and operational risk: The policy establishes a three-lines model, risk-based controls, escalation and reporting requirements, and an annual management report to governance bodies. Supporting evidence is to be retained for at least five years. Approved in June 2026.
- Market risk and IRRBB: The policy requires independent controls, limits and alerts, market-based pricing where available, backtesting, stress testing and prudential adjustments for certain illiquid or model-valued positions. It was approved in April 2024.
The filing presents policy frameworks and approval dates but does not quantify changes in risk exposure, performance or controls versus a prior comparable period.
Outlook, risks and contingencies
- No earnings guidance, financial forecast or management outlook is provided.
- The policies identify potential exposures to credit deterioration, market movements, interest-rate changes, liquidity stress, operational failures, regulatory non-compliance, and social, environmental and climate events.
- Capital and liquidity contingency, recovery and orderly resolution plans are described, but their trigger levels, action volumes and current status are not disclosed here.
- Stress testing, scenario analysis, risk-appetite limits and escalation to senior governance bodies are central features of the disclosed frameworks. The filing does not report test results, breaches, losses, or specific contingencies in effect.
Important facts for investors to verify
- Confirm Itaú’s actual capital ratios, buffer headroom and liquidity measures from its financial statements and Pillar 3 disclosures; the figures here are policy requirements, not reported results.
- Clarify the ACP percentages and the apparent inconsistency between the displayed breakdown and the statement that the countercyclical buffer is zero.
- Review current risk-appetite limits, utilization, breaches, credit quality, provisions and concentration exposures, none of which are quantified in this filing.
- Check the latest climate stress-test results and the status of capital, liquidity, recovery and resolution plans.
- Note the different approval dates, particularly that the market-risk policy was approved in 2024 while several other policies were approved in 2026.