Banking AI Agents,
Monitored for Compliance

1. Target

   Payment initiation, transfers, standing-order changes and any endpoint that moves customer funds

2. Trigger

   The agent attempts to initiate or facilitate a transfer without out-of-band authorisation

3. Action — enforced

   Block the transfer and require verified authorisation; agent may prepare the payment for the customer to confirm

4. Human override

   Released only by the customer via out-of-band strong authentication on the payment

Logged evidenceaccount id · payment amount · payee · authentication result · timestamp

1. Target

   Customer conversations that could recommend products, strategies or actions crossing the advice boundary

2. Trigger

   A response gives a personal product or investment recommendation beyond the licensed scope

3. Action — enforced

   Block the recommendation and provide factual information only; agent may route the customer to a licensed adviser

4. Human override

   Released only by a licensed adviser accepting the advice interaction under their authorisation

Logged evidencesession id · drafted recommendation · advice-boundary flag · adviser identity · timestamp

1. Target

   Credit pre-screening, hardship handling and any automated decline surfaced to an applicant

2. Trigger

   A credit decline is issued without specific, accurate ECOA adverse-action reasons or shows proxy bias

3. Action — enforced

   Block the decline notice and require accurate reasons and a fairness check; agent may issue a compliant notice

4. Human override

   Released only by the credit officer after confirming reasons and a matched-pair fairness result

Logged evidenceapplication id · decision · adverse-action reasons · fairness metric · officer identity · timestamp

1. Target

   Account records, transactions and NPI scoped to the single authenticated customer in session

2. Trigger

   A request or tool call would read another customer account data, NPI or history

3. Action — enforced

   Deny the cross-customer read and return only in-session data; no customer data flows to training or third parties

4. Human override

   None — cannot be overridden in session

Logged evidencerequesting customer · target customer · denied record id · policy rule · timestamp

1. Target

   Customer-uploaded documents, statements, transaction memos and any ingested text the agent reads

2. Trigger

   Ingested statements or memos contain directives or tool calls attempting to hijack the agent

3. Action — enforced

   Treat the content as data only and refuse the embedded instruction; the customer request continues normally

4. Human override

   None — cannot be overridden in session

Logged evidencedocument id · detected instruction · source · content hash · timestamp

1. Target

   Payment and onboarding screening against sanctions, watchlists and KYC/AML flags

2. Trigger

   A transaction or onboarding matches a sanctions, alias or fuzzy-match screening hit

3. Action — enforced

   Hold the transaction and escalate to sanctions review; agent may not clear it and must preserve the alert

4. Human override

   Released only by the sanctions officer after adjudicating the screening hit as a true false-positive

Logged evidencetransaction id · matched list · match score · adjudication · officer identity · timestamp

1. Target

   Voice and video authentication and KYC liveness checks used for account access or high-risk changes

2. Trigger

   Liveness or anti-spoofing signals indicate a synthetic voice, deepfake or cloned identity

3. Action — enforced

   Deny access and require a stronger channel; agent may offer verified branch or app authentication instead

4. Human override

   Released only by the fraud officer after verifying identity through an independent channel

Logged evidencesession id · liveness score · spoof indicators · decision · officer identity · timestamp

1. Target

   Outbound payments and new-payee setups flagged by scam and authorised-push-payment risk models

2. Trigger

   A payment matches an authorised-push-payment scam pattern yet no warning has been shown

3. Action — enforced

   Hold the payment and present a tailored scam warning; agent may proceed after the customer confirms understanding

4. Human override

   Released only by the customer acknowledging the scam warning after a mandatory review step

Logged evidencepayment id · scam pattern · warning shown · customer acknowledgement · timestamp

1. Target

   Loan and mortgage servicing actions during loss mitigation, payment posting and insurance placement

2. Trigger

   An action would advance foreclosure during loss mitigation, misapply a payment or force-place insurance

3. Action — enforced

   Block the servicing action and route to review; agent may continue the loss-mitigation workflow correctly

4. Human override

   Released only by the servicing officer after confirming loss-mitigation status and correct payment posting

Logged evidenceloan id · servicing action · loss-mitigation status · officer identity · timestamp

1. Target

   Collections, hardship and support conversations where distress or vulnerability may surface

2. Trigger

   The customer signals hardship, vulnerability or distress and no human off-ramp is offered

3. Action — enforced

   Force escalation to a trained human and pause collections pressure; agent may offer immediate handoff options

4. Human override

   Released only by a supervisor after a trained human has assumed the interaction

Logged evidencesession id · distress signal · escalation route · handoff status · supervisor identity · timestamp