Radar · Last updated: · 10 items
AI agents and money: the radar
What regulators, supervisors, banks and payment networks are saying and doing about AI agents that act on people's money, by region and status, newest source first.
Each dot is one item. Tap a dot to read it.
Distance from the centre: inner ring, act now; middle, prepare; outer, watch.
- In force
- Coming
- Draft
- Guidance
- Signal
Only public sources that can be cited. Each item links to a short note and its source. Added when something material happens, not on a schedule.
Needs attention now
CERT-In on AI agents: could you show what the agent did? India In force
If your agent moves money: be ready to show exactly what it did on a system, and keep that record for at least 180 days.
RBI on AI-accelerated cyber threats: could you show what your AI did? India In force
If your agent moves money: expect your bank or regulator to ask what your AI did, and for a record that holds up.
Dates to know
-
US Coming
Colorado SB 26-189: can you show what happened, three years later? -
EU Coming
EU AI Act: the high-risk deadline moved. The logs question did not.
Everything on the radar
In force: issued and applying now. Coming: law with a date ahead. Draft: open for comment. Guidance: published, not binding. Signal: statements, supervisory questions, market moves.
-
Canada Signal Prepare
Canada's banks are blocking AI agents too. Who will let one in?
RBC, TD, BMO, CIBC and Scotiabank are reported to be keeping or limiting third-party personal AI agents out of online banking, a week after the largest US banks did the same.
If your agent moves money: the banks saying no are now in two countries; the question they ask is the same.
-
US Signal Prepare
US banks are blocking AI agents. What would let one back in?
Four of the largest US banks are reported to be keeping third-party AI agents out of customer accounts, because they cannot tell an instruction from an unauthorised payment.
If your agent moves money: banks will let it in only when they can tell an instruction from an unauthorised payment.
-
India In force Act now
CERT-In on AI agents: could you show what the agent did?
CERT-In's critical advisory on AI agents that reached live systems, as MediaNama reported it, and the question it puts to any bank, NBFC or fintech running agents.
If your agent moves money: be ready to show exactly what it did on a system, and keep that record for at least 180 days.
-
Global Guidance Watch
FSB's AI sound practices, read for AI agents that move money
Four of the FSB's twelve practices meet at one question once an AI agent can move money: when it acted, can you prove what happened to someone who has no reason to believe you?
If your agent moves money: your board and auditor will ask you to prove what it did, not describe it.
-
US Signal Prepare
US bank supervisors are asking about AI agents. Could you answer?
Fed, OCC and FDIC supervisors are reported to be asking banks who approves what their AI agents do, whether those decisions can be tracked and audited, and how an agent would be stopped.
If your agent moves money: be ready to show a past decision, who approved it and that it stayed within its limits.
-
India Signal Prepare
NPCI on AI agents and UPI: who shows what was authorised?
NPCI's chairman on AI agents and UPI, as MediaNama reported it, and the question customers will ask first when an agent pays and gets it wrong.
If your agent moves money: expect to be asked who decided a payment was within what the customer authorised.
-
Global Draft Watch
EMVCo's agentic payments draft: who shows what the agent did with the customer's intent?
EMVCo's draft framework for card payments made by AI agents registers what the customer intended. It does not say who shows what the agent then did.
If your agent moves money: knowing what the customer allowed is not enough; a dispute asks what the agent actually did.
-
EU Coming Prepare
EU AI Act: the high-risk deadline moved. The logs question did not.
The Digital Omnibus on AI moved the EU AI Act's high-risk obligations to December 2027. What a deployer will be asked to show about an AI system's decisions did not change.
If your agent moves money: where it decides on credit, its logs have to hold up from December 2027.
-
India In force Act now
RBI on AI-accelerated cyber threats: could you show what your AI did?
RBI's advisories on AI-accelerated cyber threats asked banks and regulated entities for a board-approved gap assessment and an action plan, and name logging and traceability among the safeguards.
If your agent moves money: expect your bank or regulator to ask what your AI did, and for a record that holds up.
-
US Coming Prepare
Colorado SB 26-189: can you show what happened, three years later?
Colorado's replacement AI law gives people notice, an explanation and a right to human review, and requires three years of records. The question for any team using AI in those decisions.
If your agent moves money: where AI shapes a decision about a person, keep a record you can explain to them three years later.
Nothing on the radar for that combination yet.
Across all of these, the question is the same: when your agent moved money, can you show what it did, in a form someone outside your company can check?