In short
- AI agents are advancing faster than industry standards and consumer protections, raising concerns about their use in e-commerce.
- Banks propose disclosure requirements, transparency, and safeguards to protect customer data in transactions involving AI agents.
What happened
A group of banks, including NatWest, Bank of America, ING, ASB Bank, and Capital One, warned on September 22 that AI agents used for online shopping could heighten risks of scams, fraud, and data-privacy breaches. They highlighted that technology is advancing faster than industry standards and consumer protections, with consumers unclear about whether AI will act in their interests.
The banks' report outlined specific risks, such as AI agents requesting card details and entering them directly into websites or steering users toward payment methods with weaker protections. They plan to discuss proposals with policymakers, including mandatory disclosure when AI agents are involved, greater transparency in decision-making, and safeguards for customer data.
They are concerned that AI agents may buy the wrong thing or spend too much – or even worse, lose their money to scams and fraud. They are not sure whether they will be protected or who they will need to go to if things go wrong.
In numbers
- 2.5 per cent searches originating from AI agents at John Lewis
- 0.3 per cent searches originating from AI agents at John Lewis a year earlier
What compliance teams should check
- Review customer transactions for AI agent involvement and ensure disclosure requirements as proposed by NatWest, Bank of America, ING, ASB Bank, and Capital One.
- Assess payment methods used by AI agents for weaker protections and monitor for direct card detail entry into websites.
- Update internal policies to align with proposed safeguards for customer data and transparency in AI agent decision-making.
Why it matters
This story highlights the rapid adoption of AI shopping bots and the associated risks for financial institutions, including increased exposure to scams, fraud, and data-privacy breaches. As AI agents become more involved in e-commerce, compliance officers must ensure robust consumer protection measures, transparency, and data safeguards. The banks' proposals signal a need for updated industry standards and regulatory engagement to address these emerging risks and maintain trust in digital commerce.
Catch stories like these on your own customers.
complead screens your customers against adverse media, sanctions and PEP lists, and re-checks them every day. When a name you hold turns up in the news, it lands in your case queue with the evidence attached.