The Rise of the Rogue Agent: A Compliance Conundrum for Financial Institutions

The financial sector has perfected its “know your customer” (KYC) protocols over decades, but a new challenge is emerging with AI agents that can shop and pay on their own. Zhuoqun Bian, president of Ant Digital Technologies, warned at the Fortune Leaders Forum in Macau last month that banks need to adapt by implementing “know your agent” (KYA) rules.

The proliferation of AI agents is significant. According to a McKinsey report from January, these digital representatives could orchestrate up to $5 trillion in global consumer spending by 2030. This number represents a substantial shift in the way transactions are conducted. However, the infrastructure supporting these agents was designed with humans in mind, not AI.

Bian noted that “all the infrastructure needs to be rebuilt or enhanced for agents.” Payment systems rely on predictable rules, legal certainty, and clear accountability structures to ensure trust and financial stability. The International Monetary Fund observed in an April note that AI agents are probabilistic and adaptive, providing different answers to the same prompt.

The implications of this development are far-reaching. Banks will need to reexamine their operating models, processes, and compliance protocols to accommodate the autonomy of AI agents. As Benson Wong, managing director and head of digital at JPMorgan Private Bank, said, “the cost of an agent getting something wrong scales with its autonomy.” This means that financial institutions must verify the identity and authority of these digital representatives.

The collaboration between Ant International, Mastercard, and Visa on a KYA interoperability framework is a step in the right direction. The framework allows card networks, digital wallets, and marketplaces to recognize trusted AI agents across ecosystems. However, this effort highlights the need for industry-wide cooperation and standardization in addressing the challenges posed by AI agents.

The rise of the rogue agent raises fundamental questions about accountability and trust in financial systems. As we continue to rely on these digital representatives to facilitate transactions, we must ensure that they operate within established norms and guidelines. The stakes are high, with potential consequences ranging from embarrassing moments to vastly scaled impacts.

Financial institutions will need to adapt quickly to this new reality. By prioritizing verification and accountability, banks can mitigate the risks associated with AI agents and maintain trust in their systems. This requires a fundamental shift in how we think about identity, authority, and responsibility in the digital age.

The clock is ticking, and the industry must act quickly to address the implications of AI agents on compliance protocols. The future of financial transactions hangs in the balance, and it’s time for banks and card networks to take a proactive stance in verifying who—or what—is spending money.