Loading story…
Banks and payment providers are warning that deepfakes and agentic AI are increasing fraud pressure on digital payments, particularly where identity verification, authorization, and anti-money-laundering controls depend on signals that can be spoofed. Deloitte highlighted rising concern that AI-generated voice and video can be used to impersonate customers and defeat banking verification workflows, while other industry reporting noted warnings that deepfakes could bypass AML and identity checks and expose institutions to higher account takeover and payment fraud risk.
At the same time, firms are adapting payment infrastructure for AI-driven commerce rather than allowing autonomous models to move money without guardrails. Industry analysis said payments remain difficult for AI agents because settlement requires licensed intermediaries, deterministic execution, regulatory compliance, and clear liability for fraud and errors. Providers are responding with agent-focused controls such as wallet-based authorization, token protections, and abuse detection, reflecting a broader shift toward constrained, supervised AI payments instead of fully autonomous transaction execution.
See the actors and campaigns active against you right now.
7 events from the most recent confirmed update back to the earliest known activity.
The Bluescreen article states that Kazakhstan adopted the region's first AI law in July 2026 and that the Digital Code entered into force.
According to the Bluescreen article, Stripe unveiled 288 new products and features at Sessions 2026, including capabilities aimed at agentic commerce and machine payments.
The Bluescreen article says the IMF stated in a 2026 analytical note that AI agents behave probabilistically, while payment settlement requires unambiguous outcomes.
In a December 2025 industry review, the Financial Action Task Force warned that deepfakes could circumvent AML controls, due diligence, and digital identity verification during account opening.
The National Bank of Kazakhstan reported that in 2025 cashless transactions made up 98.3% of payment and transfer volume by count and 87.2% by value in the country.
The Bluescreen article says Stripe launched its Agentic Commerce Suite in 2025 so merchants could upload a product catalog once and sell through supported AI agents without separate integrations.
Deloitte cited U.S. financial-sector losses from generative-AI-enabled fraud at $12.3 billion in 2023, using this as the baseline for later projections of rising fraud risk.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple outlets reported growing adoption of **agentic AI**—systems that can autonomously execute multi-step workflows—across commerce and the public sector, raising new security, fraud, and accountability concerns. In e-commerce, AI “shopping” agents are increasingly able to initiate purchases and interact with merchant sites; reporting highlighted merchant complaints that automated agents can scrape product data without consent, generate inaccurate listings or images, and create fulfillment/pricing errors that damage customer trust while leaving merchants to absorb the operational and reputational impact. In financial services, commentary on **stablecoin** payment fraud argued that because many crypto transactions are effectively irreversible, fraud controls must shift “left” to *pre-authorization* blocking using **real-time AI** models tuned for high recall, supported by layered defenses and use of open blockchain telemetry. Separately, state and local government IT leaders are exploring agentic AI to improve productivity and citizen services, implying a need for stronger governance over autonomous actions, auditability, and risk controls as these systems move from pilots into operational workflows. One reference was a vendor/platform announcement and another was a broad societal-risk article on AI (deepfakes, opacity, labor disruption) that did not materially add to the specific agentic-payments/fraud/government adoption thread.
Jun 29, 2026
Cybersecurity and fraud-risk leaders are urging stronger, enforceable security controls as the U.S. **Department of the Treasury** develops AI cybersecurity and risk-management guidance for the financial sector. Reported expectations for the forthcoming materials include coverage of **governance**, **data practices**, **fraud**, **transparency**, and **digital identity**, but analysts warned that non-mandatory “principles” risk being ineffective as **AI-enabled attacks** increase. Recommended guardrails include mandatory **adversarial testing**, maintaining an **AI inventory**, **model monitoring**, and **real-time identity validation**, with specific concern for threats such as **data poisoning** of training pipelines. In parallel, financial institutions deploying **agentic AI** (systems that can initiate payments, approve transactions, or freeze accounts) are being warned that traditional authentication models assume a human user and do not adequately address autonomous or semi-autonomous agents. Fraud and AML specialists are calling for **managed, revocable digital identities** for AI agents—ideally with **cryptographic proof**—and **continuous trust** approaches that validate not just identity but **delegated authority**, detect “scope creep,” and preserve traceability to both the authorizing human and the executing agent.
Jun 29, 2026
Deepfake technologies, powered by generative AI and large language models, are increasingly being used by cybercriminals to create convincing fake images, videos, and audio for fraudulent purposes. These deepfakes can cause significant reputational and financial harm to businesses, and the rapid advancement and accessibility of AI tools have lowered the barrier for threat actors to launch such attacks. As a result, organizations face heightened risks from scams that leverage synthetic media to deceive employees and customers, making detection and prevention more challenging. Artificial intelligence models designed to detect fraud, particularly in real-time payment systems, struggle to identify scams that rely on social engineering and human deception. While AI can flag statistical anomalies in transaction patterns, it often fails to catch authorized push payment scams where victims are manipulated into making seemingly normal transfers. The inability of current AI systems to discern intent or detect sophisticated social engineering tactics highlights a critical gap in enterprise defenses against modern, AI-enabled scams and deepfake attacks.
Jun 29, 2026