Regulation needs effective supervision; but regulated entities may deviate with unobserved actions. For identification, we analyze banks, exploiting ECB's asset-quality-review (AQR) and supervisory security and credit registers. After AQR announcement, reviewed banks reduce riskier securities...