Topic starter
10/06/2026 10:40 pm
TL;DR: Banking leaders at Money20/20 Europe described how AI-driven fraud, embedded finance, cloud infrastructure, and evolving compliance demands are changing the way institutions balance trust with speed, according to SumSub. The identity lesson is that modern financial services now need governance built for continuous risk decisions across human, machine, and platform access.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Bank Leaders on AI, Fraud & Trust – Money 20/20 Special Part 1”.
Key questions
Q: How should banks govern embedded finance journeys that rely on partner access?
A: Banks should treat embedded finance as delegated access, not just integration.
Q: Why do AI-enabled fraud operations increase risk for organisations that rely on human review alone?
A: AI-enabled fraud raises risk because it lowers the skill barrier, increases message quality, and lets attackers run campaigns at greater volume and speed.
Q: What breaks when cloud-native banking does not govern service accounts like privileged users?
A: The bank loses visibility into which machine identities can alter data, move funds, or change workflows.
Practitioner guidance
- Define trust boundaries for embedded finance flows Inventory every partner journey that can initiate payments, lending actions, or account changes, then assign an owner for each delegated decision path.
- Align fraud signals with live identity assurance Use real-time checks for device, session, and behavioural context where AI-driven fraud can outrun manual review and standard step-up steps.
- Bring cloud service accounts into privileged governance Include deployment roles, operational accounts, and service-to-service permissions in the same review cycle used for high-risk human access.
Bottom line: Embedded finance and AI fraud are forcing banks to rethink trust as a live governance issue rather than a static control problem.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:48 am
AI fraud is forcing banking identity controls to become continuous rather than event-based. The old model assumed that a successful login or approved workflow was enough to establish trust for the session. That assumption is breaking because fraud actors adapt after authentication, not before it. Practitioners need to treat post-authentication behaviour as part of identity assurance, not just a separate fraud problem.
A few things that frame the scale:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities, according to The 2024 ESG Report: Managing Non-Human Identities.
- Enterprises that have experienced a compromised NHI averaged 2.7 separate incidents in the past 12 months, according to The 2024 ESG Report: Managing Non-Human Identities.
A question worth separating out:
Q: How do IAM teams support faster lending or payments without weakening trust?
A: IAM teams should align authentication, authorization, and fraud controls with the business action being taken. A low-risk lookup may need minimal friction, while a loan approval, payment release, or privilege change should trigger stronger checks. The goal is not to slow every journey, but to make higher-risk actions carry proportionately stronger assurance.
👉 Read our full editorial: Embedded finance and AI fraud are reshaping banking trust
12/06/2026 4:22 am
Embedded finance turns trust into a distributed identity problem: when banking functions are exposed through partner journeys, the control plane is no longer limited to the core institution. Authorization, delegation, and revocation now span banks, platforms, and payment workflows. That means the real governance question is not whether a bank owns the account, but whether it still controls the action path end to end.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: Should compliance teams prioritise speed or control in modern banking platforms?
A: They should optimise for both, but only if control is continuous rather than periodic. In fast-moving banking environments, trust depends on whether access, monitoring, and delegation still match the live operating model after each change, not on quarterly evidence alone.
👉 Read our full editorial: Embedded finance and AI fraud are reshaping banking trust
This post was modified 1 day ago by NHI Mgmt Group