TL;DR: Digital assets are changing payments, tokenized assets, and compliance models in financial services, with Chainalysis framing the shift around stablecoins, real-world asset tokenization, and agentic payments. The governance challenge is no longer whether institutions can participate, but whether identity, authorization, and risk controls can keep pace with new transaction models.
At a glance
What this is: Chainalysis frames digital assets as a finance infrastructure shift, with stablecoins, tokenized assets and agentic payments driving new governance demands.
Why it matters: Finance and IAM teams need to treat payment authority, on-chain controls and machine spending as governance problems, not just product or market questions.
Context
Digital assets are no longer just an investment or trading topic. They are becoming part of core payment and settlement infrastructure, which means the control problem moves from simple transaction monitoring to governance over who or what is authorised to move value.
The article's focus on stablecoins, tokenized treasuries and agentic payments also creates a clear identity angle. Once software agents can spend on behalf of users, payment controls start to resemble non-human identity governance, with authorization scope, lifecycle control and accountability all becoming central.
Key questions
Q: How should finance teams govern agentic payments without losing control of spending authority?
A: Treat agentic payments as delegated financial authority rather than simple automation. Define who can grant spending rights, what the agent may do, which transactions require extra approval and when authority expires. Without those boundaries, the organisation has no clear way to prevent overreach or to prove who authorised a transaction.
Q: Why do tokenized assets need identity and authorization controls?
A: Because the token is only useful if the organisation can control who may hold, move or redeem it. Tokenization turns ownership into software-enforced entitlement, so weak access design can expose transfer rights, settlement logic and custody workflows. Identity and authorization controls make the asset governable rather than merely transferable.
Q: What breaks when AI systems can spend on behalf of users?
A: The main failure is that traditional approval models assume a human remains in the loop for each material action. An agent can complete transactions faster than review cycles and may reuse delegated rights across multiple steps. That creates a standing authority problem unless scope, expiry and traceability are enforced.
Q: When should institutions prioritise governance over new digital asset use cases?
A: They should prioritise governance before scaling any use case that can move value, create settlement obligations or trigger compliance duties. If the control model cannot explain who authorised the action, what it covered and how it will be revoked, the use case is already ahead of the operating model.
Technical breakdown
Stablecoin rails and payment governance
Stablecoins alter payment architecture by moving value transfer onto programmable rails that can settle faster and across borders with fewer intermediaries. That changes the control surface: transaction monitoring, sanctions screening, wallet governance and authorization boundaries now sit closer to runtime decision-making than to legacy batch settlement. The key issue is not only speed, but who can initiate, approve and reconcile value movement when the rail itself is software-mediated.
Practical implication: finance and IAM teams must define how payment authority is issued, monitored and revoked across wallet and platform layers.
Tokenized assets and access to value
Tokenized real-world assets turn claims on treasuries, funds or other instruments into digitally governed objects. That creates a blend of custody, entitlement and compliance controls because access to the asset is inseparable from the permissions model around the token. In practice, tokenization pushes ownership questions into systems design, where policy, identity assurance and operational segregation become part of how value is represented and transferred.
Practical implication: organisations should map token-holder entitlements to approval, custody and segregation controls before scaling issuance.
Agentic payments and non-human identity
Agentic payments are different from ordinary automation because the AI is described as having authority to spend and complete transactions on behalf of users. That means the agent behaves like a non-human actor with bounded financial authority, so identity, delegation, and transactional scope matter as much as model capability. If those controls are weak, the problem is not just fraud or error, but uncontrolled delegation of economic action.
Practical implication: treat spending agents as governed non-human identities with explicit scope, expiry and accountability.
Threat narrative
Attacker objective: The objective is to obtain or abuse transaction authority so value can be moved at scale without effective human or policy control.
- Entry occurs when an agent, wallet, or platform is granted transaction authority without sufficiently narrow scope or review.
- Escalation follows when that authority is reused across payment flows, token transfers or settlement actions beyond the original intended task.
- Impact is realised when machine-initiated transactions move value, trigger compliance exposure or create unrecoverable financial and accountability loss.
Breaches seen in the wild
- Shai Hulud npm malware campaign: Shai Hulud campaign: npm malware exposed secrets on GitHub.
Read and download The State of NHI & AI Agent Breach Report 2026, covering 200+ breaches impacting Non-Human Identities including AI Agents.
NHI Mgmt Group analysis
Digital asset governance is becoming an identity problem before it is a finance problem. Once payment rails are software-mediated, the critical question is who or what can act with financial authority. That shifts the centre of gravity toward authorization boundaries, delegation controls and lifecycle management for machine-driven spend. Practitioners should stop treating digital asset controls as a separate silo from identity governance.
Agentic payments create a new class of non-human financial actor. The article's framing of AIs that can spend on behalf of users is materially different from traditional automation because the system is not just executing fixed instructions. It is selecting and completing transactions with delegated authority, which means NHI-style governance becomes relevant to finance operations. Practitioners need policy and audit models that can describe and limit that authority explicitly.
Tokenization expands access to value, but also expands the consequences of weak entitlement design. When assets become programmable tokens, mis-scoped access is no longer just a data-control issue. It becomes a control issue over ownership, transfer rights and settlement legitimacy. The governance lesson is that token models should be designed with the same discipline used for privileged access and high-risk credentialed actions.
Payment innovation is outpacing the accountability model that supports it. Stablecoins, tokenized assets and on-chain execution all assume that control can be expressed cleanly in code, yet institutions still need evidence of who authorised what, under which conditions, and for how long. That is a governance gap, not a technology gap. Practitioners should build auditability and delegation traceability into the operating model from the start.
Financial services will need a named concept for this control gap: delegated transaction authority. The article makes clear that the issue is not merely access to a wallet or API, but the right to initiate economic action under a bounded mandate. That mandate needs explicit approval, expiry and oversight or it becomes indistinguishable from standing privilege. Practitioners should govern delegated transaction authority as a first-class risk.
What this signals
Delegated transaction authority is the control gap finance teams should name explicitly. Stablecoins and tokenized assets are pushing institutions toward software-mediated value transfer, but the deeper risk is not the rail itself. It is the ability to hand spending or transfer rights to systems without a lifecycle model that matches the economic impact of those rights.
Digital asset programmes will increasingly converge with identity governance, especially where agents, wallets and custody platforms act on behalf of users. That means finance, IAM and risk teams need one operating model for approval, expiry, audit and revocation, rather than three separate control discussions.
For practitioners
- Define delegated transaction authority Document exactly which system, human or agent can initiate value transfer, what asset classes are in scope and what approval is required before execution.
- Classify spending agents as non-human identities Give agentic payment systems explicit ownership, authentication, entitlement and offboarding controls so they are governed like other machine identities.
- Separate token custody from transaction initiation Design controls so the entity that holds or signs for a token is not automatically the entity that can approve or execute every downstream transfer.
- Embed auditability into on-chain payment workflows Capture who delegated authority, which policy allowed the transaction and when that authority expires, so finance teams can reconstruct each spend decision.
Key takeaways
- Digital assets are turning finance controls into identity and delegation problems, not just payment or trading problems.
- Agentic payments introduce a non-human actor that can exercise bounded financial authority, which changes how institutions should design accountability.
- The practical test is whether teams can prove who authorised a transaction, what scope was granted and when that authority ends.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
OWASP Agentic AI Top 10 and MITRE ATT&CK address the attack and risk surface, while NIST SP 800-53 Rev 5 and NIST CSF 2.0 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| OWASP Agentic AI Top 10 | ASI03 — Identity & Privilege Abuse | Agentic payments create delegated authority that can be over-scoped or misused. |
| ASI09 — Human-Agent Trust Exploitation | Users may over-trust systems that spend on their behalf without tight guardrails. | |
| Recommendation — Define and enforce bounded privileges for any agent that can initiate value transfer. Limit delegated spend rights and require explicit approval for high-impact agent actions. | ||
| NIST SP 800-53 Rev 5 | IA-9 — Identification and Authentication (Non-Organizational Users) | On-chain actors, wallets and external services need governed authentication boundaries. |
| Recommendation — Apply IA-9 to govern authentication for external systems and machine-mediated transaction flows. | ||
| MITRE ATT&CK | TA0006; TA0040 — Credential Access; Impact | Abuse of delegated transaction authority maps to credential or access misuse and financial impact. |
| Recommendation — Track unauthorized spend pathways as credential abuse leading to impact in detection and response. | ||
| NIST CSF 2.0 | PR.AA-05 — Access Permissions, Entitlements and Authorizations | The article centres on who can initiate payment or transfer actions and under what scope. |
| Recommendation — Use PR.AA-05 to review and constrain transaction entitlements for human and machine actors. | ||
Key terms
- Agentic Payment: A payment flow where software can request, authorize, and complete a transaction without a human completing each step. In governance terms, the important question is not just payment speed, but how the organisation binds the transaction to an accountable identity, policy scope, and audit trail.
- Tokenized Asset Platform: A tokenized asset platform is a system that represents a real-world asset or value right as a digital token that can be issued, transferred, or redeemed. These platforms need strong identity, compliance, and fraud controls because token ownership can affect access to financial value, custody, and redemption rights.
- Delegated Transaction Authority: Delegated transaction authority is the permission set that allows a system, agent or service to initiate or complete financial actions on behalf of a user or organisation. It is a governance concept, not just a technical permission, because it must define who grants the right, what it covers and when it ends.
- Stablecoin Rail: A stablecoin rail is the payment infrastructure used to move value using tokenised assets rather than traditional card or bank settlement. In governance terms, it shifts control from intermediary-heavy processing to wallet, key, and policy management, which creates a stronger need for privileged access oversight.
Deepen your knowledge
NHI Foundation Level course, the industry's only accredited NHI security programme, covers NHI governance, agentic AI identity, machine identity security and secrets management. It is designed for practitioners who need to bring identity discipline to emerging automation and delegated authority models.
Published by the NHIMG editorial team on July 10, 2026.
Updated on October 11, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org