{"id":137621,"date":"2026-08-12T18:08:13","date_gmt":"2026-08-12T18:08:13","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/137621\/"},"modified":"2026-08-12T18:08:13","modified_gmt":"2026-08-12T18:08:13","slug":"your-banks-ai-agent-may-need-a-permission-slip","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/137621\/","title":{"rendered":"Your Bank\u2019s AI Agent May Need a Permission Slip"},"content":{"rendered":"<p>Financial regulators and banks have spent years catching artificial intelligence agent mistakes after the fact, tracing errors and assigning blame once the money has already moved.<\/p>\n<p>Singapore\u2019s central bank wants to get there first. The <a href=\"https:\/\/www.mas.gov.sg\/\" rel=\"nofollow noopener\" target=\"_blank\">Monetary Authority of Singapore<\/a> is asking banks to check an agent\u2019s identity, permissions and risk limits before it executes a payment or trade, not after.<\/p>\n<p>MAS published the approach in a July 3 white paper called \u201c<a href=\"https:\/\/www.mas.gov.sg\/news\/media-releases\/2026\/mas-partners-industry-to-develop-safeguards-for-ai-agents-in-finance\" rel=\"nofollow noopener\" target=\"_blank\">Safeguards for Agentic Finance at Runtime<\/a>,\u201d or SAFR, developed with eight financial and <a href=\"https:\/\/kla.digital\/blog\/safr-mas-framework-explained\" rel=\"nofollow noopener\" target=\"_blank\">payments<\/a> companies, including <a href=\"https:\/\/www.ant-intl.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Ant International<\/a>, <a href=\"https:\/\/www.circle.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Circle<\/a>, <a href=\"https:\/\/www.us.hsbc.com\/\" rel=\"nofollow noopener\" target=\"_blank\">HSBC<\/a>, <a href=\"https:\/\/www.jpmorganchase.com\/\" rel=\"nofollow noopener\" target=\"_blank\">JPMorganChase<\/a>, <a href=\"https:\/\/www.manulife.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Manulife<\/a>, <a href=\"https:\/\/www.mastercard.com\/us\/en.html\" rel=\"nofollow noopener\" target=\"_blank\">Mastercard<\/a>, <a href=\"https:\/\/www.ocbc.com\/\" rel=\"nofollow noopener\" target=\"_blank\">OCBC<\/a> and <a href=\"https:\/\/www.visa.com\/en-us\" rel=\"nofollow noopener\" target=\"_blank\">Visa<\/a>.<\/p>\n<p>The architecture runs on four components, including an identity layer confirming what an agent is and what it is authorized to do, a repository of the specific rules that apply to it, an engine that checks each proposed action against those rules, and an audit log that records every decision. Every action resolves to one of four outcomes. It executes automatically, proceeds while flagged for review, pauses for a human to approve, or gets denied outright, according to the paper.<\/p>\n<p>MAS confirmed in an Aug. 5 written <a href=\"https:\/\/www.mas.gov.sg\/news\/parliamentary-replies\/2026\/written-reply-to-parliamentary-question-on-agentic-ai-in-financial-services\" rel=\"nofollow noopener\" target=\"_blank\">parliamentary reply<\/a> that agentic AI falls within the scope of its broader AI risk management guidelines. Those guidelines are being finalized under a principles-based approach rather than fixed technical rules.<\/p>\n<p>SAFR itself does not constitute binding regulatory guidance, the white paper said.<\/p>\n<p>Other Regulators Are Building Their Own Version of This Model<\/p>\n<p>Singapore is not alone in facing this problem, although it has moved further toward a concrete technical answer than most peers.<\/p>\n<p>The United Kingdom\u2019s <a href=\"https:\/\/www.fca.org.uk\/\" rel=\"nofollow noopener\" target=\"_blank\">Financial Conduct Authority<\/a>, the country\u2019s main regulator for banks, insurers and payments firms, has taken a more cautious approach so far. In a June 24 <a href=\"https:\/\/www.fca.org.uk\/news\/speeches\/rethinking-regulation-age-ai\" rel=\"nofollow noopener\" target=\"_blank\">speech<\/a>, CEO <a href=\"https:\/\/www.fca.org.uk\/about\/who-we-are\/chief-executive\" rel=\"nofollow noopener\" target=\"_blank\">Nikhil Rathi<\/a> said legislation \u201cwill never keep up\u201d with AI and that the <a href=\"https:\/\/www.pymnts.com\/news\/artificial-intelligence\/2026\/fca-boss-warns-ai-is-moving-faster-than-the-law\/\" rel=\"nofollow noopener\" target=\"_blank\">regulator<\/a> must shift toward \u201cstewardship,\u201d intervening on judgment rather than waiting for detailed rules in every case.<\/p>\n<p>\u201cIn some areas, we will still need detailed rules,\u201d Rathi said. \u201cBut in others, traditional rule-making simply won\u2019t work anymore.\u201d<\/p>\n<p>More than 80% of U.K. financial services firms are already using or adopting AI, Rathi said in his June remarks. The FCA is separately exploring whether agentic AI could act as a \u201cfirst responder\u201d to speed up its own market monitoring.<\/p>\n<p>Hong Kong has no centralized framework governing AI in financial services, relying instead on voluntary governance frameworks, according to law firm <a href=\"https:\/\/www.mayerbrown.com\/en\/insights\/publications\/2026\/07\/ai-regulation-in-singapore-and-hong-kong-a-mid-year-checkpoint\" rel=\"nofollow noopener\" target=\"_blank\">Mayer Brown<\/a>.<\/p>\n<p>The <a href=\"https:\/\/european-union.europa.eu\/index_en\" rel=\"nofollow noopener\" target=\"_blank\">European Union<\/a>\u2019s supervisory authorities have called only for \u201cenhanced governance\u201d of frontier AI models used in finance, Mondaq <a href=\"https:\/\/www.mondaq.com\/unitedstates\/fintech\/1827578\/fintech-global-fs-regulatory-round-up-we-31-july-2026\" rel=\"nofollow noopener\" target=\"_blank\">reported<\/a> Friday (Aug. 7), a general statement rather than an operational framework comparable to MAS\u2019 runtime checkpoints.<\/p>\n<p>U.S. financial institutions are approaching the same problem from the industry side rather than waiting for a regulator to define it.<\/p>\n<p><a href=\"https:\/\/www.fiserv.com\/en.html\" rel=\"nofollow noopener\" target=\"_blank\">Fiserv<\/a> launched an <a href=\"https:\/\/www.pymnts.com\/artificial-intelligence-2\/2026\/ai-agents-turn-open-banking-into-an-accountability-test\/\" rel=\"nofollow noopener\" target=\"_blank\">operating system<\/a> called <a href=\"https:\/\/www.pymnts.com\/artificial-intelligence-2\/2026\/fiserv-and-openai-bring-frontier-ai-to-banks\/\" rel=\"nofollow noopener\" target=\"_blank\">agentOS<\/a> in May, built to let banks deploy and govern AI agents across core banking, payments and servicing workflows from a single environment, with kill switches, human-in-the-loop controls and audit trails built in. Six banks helped build it, two institutions are running it in beta, and <a href=\"https:\/\/openai.com\/\" rel=\"nofollow noopener\" target=\"_blank\">OpenAI<\/a> and <a href=\"https:\/\/aws.amazon.com\/\" rel=\"nofollow noopener\" target=\"_blank\">AWS<\/a> joined as collaborators.<\/p>\n<p>The instinct behind the build mirrors what MAS is proposing. Check an agent\u2019s authority before it acts, not after.<\/p>\n<p>The volume of decisions AI agents can generate is starting to outpace what compliance teams can review manually. Financial executives feel that strain already, as 47% cited overlapping regulatory requirements as a top operational challenge, and 46% reported increasing sophistication in fraud schemes, according to the <a href=\"https:\/\/www.pymnts.com\/pymnts-intelligence\/\" rel=\"nofollow noopener\" target=\"_blank\">PYMNTS Intelligence<\/a> report \u201c<a href=\"https:\/\/www.pymnts.com\/cybersecurity\/fraud-prevention\/2025\/banks-face-a-fraud-spike-as-attacks-stress-legacy-systems\/\" rel=\"nofollow noopener\" target=\"_blank\">2025 State of Fraud and Financial Crime in the United States<\/a>.\u201d<\/p>\n<p>For all PYMNTS AI coverage, subscribe to the daily <a href=\"https:\/\/pymnts.com\/subscribe\/\" rel=\"nofollow noopener\" target=\"_blank\">AI Newsletter<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"Financial regulators and banks have spent years catching artificial intelligence agent mistakes after the fact, tracing errors and&hellip;\n","protected":false},"author":2,"featured_media":137622,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[405,25,7537,2226,3448,50281,66,310,11763],"class_list":["post-137621","post","type-post","status-publish","format-standard","has-post-thumbnail","category-agentic-ai","tag-ai-agents","tag-artificial-intelligence","tag-artificial-intelligence-agents","tag-banking","tag-banks","tag-monetary-authority-of-singapore","tag-news","tag-pymnts-news","tag-regulations"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/137621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=137621"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/137621\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/137622"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=137621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=137621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=137621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}