Banking News & Insights

92% of the 26 benchmarked banks are piloting or allowing agentic AI, 73% allow agents in production - yet agents remain under 10% of AI portfolios at 88% of institutions.

Bank of China's Jakarta branch is appointed as RMB clearing bank as Indonesia-China LCT volume reaches $43.89 billion in nine months, while BI signs cooperation with the Philippines' BSP and joins an LCT framework with Malaysia and Thailand.

Registered users reached 5.02 million with Rp103.53 trillion in transactions as of September 2026, and QRIS acceptance is being extended into 219 facilities across railway cafes and restaurants.

The bank says one decision-journey step that took three hours now completes in minutes, with AI agents handling document processing and data validation under human oversight.

The wallet, built with Amex, Mastercard and Visa, lets agents pay without touching the underlying card - while the WSJ reports JPMorgan moved to stop agents using customer credit cards.

Announced at the National Fintech Month press conference on 11 November, IDSP comprises BI-Payment ID, BI-Payment Info and BI-Payment Clear, backed by PBI 10/2026, with early priorities on fraud detection and transaction-data credit scoring.

In a disclosure to OJK and the IDX dated 9 November, BNI said user access will be wound down through 30 November with full service closure on 21 December, consolidating its mobile base onto the wondr app built on Ant International's mPAAS.

The hires, including former Credit Union of Texas COO Angela Faust as chief product officer, back Delinquency Shield, which flags struggling borrowers and offers payment help automatically before loans hit 60-day delinquency.

Two days after BioCatch AiRE, Feedzai brings a different mechanism to agent detection: persistent device fingerprinting, cryptographic binding between customer, device and bank, and cross-institution network fraud scores.

Customers dictate payments in natural language and approve with one tap, with retail rollout planned for late 2026; SME users can pay bills by uploading photos of invoices, an early production use of document vision in banking payments.

The behavioral biometrics firm's new capability distinguishes human-driven from agent-driven sessions before money moves — with early network data pointing to onboarding, not transactions, as the most exposed moment.

The state bank's procurement portal shows both entries posted 10 November with registration windows closing 12-13 November — evidence of an active Q4 security and automation spending cycle.

Announced after a cabinet-level economic meeting attended by the OJK chair, BI governor and deputy trade minister, the package covers eight quake-hit regencies and a data-backed push for microcredit in 2027.

With rural banks in Bali carrying an 11.27% NPL, the regulator wants faster disposal of repossessed property, including mandatory independent appraisal for collateral above Rp1 billion under POJK 1/2024.

The bank's updated online access agreement makes customers responsible for properly revoking AI agent authorizations — and for keeping evidence they did so — a contractual template likely to spread to other banks.

CIBC Innovation Banking provided growth capital of undisclosed value to PortX, an AI-native integration platform for US community banks and credit unions. A client reported saving more than 10,000 work hours.

Indonesia's banking regulator warned banks to evaluate fintech and P2P partnerships regularly and to suspend disbursement through platforms whose partnership portfolios show surging NPLs. The industry's 90-day tardiness rate rose above the 5 percent regulatory threshold in September.

Stifel Financial will reimagine its advisor Dashboard platform with Anthropic's Claude, Claude Code, and Claude Design, announced at Blueprint 2026. It follows similar agentic AI moves by Northern Trust and IBM-Microsoft within 48 hours.

Trust Stamp launched Knowing Consent, a per-transaction biometric authorization product for transactions initiated by AI agents. The company said deployment takes days via a single API call.

The UK's oldest and largest Islamic bank will migrate its core banking platform to Monument Technology, following a wave of global core modernization announcements.

AlRayan Bank signed a core platform migration with the cloud-native vendor, extending this week's wave of core modernization deals at niche and regional banks.

Mitsubishi UFJ's rollout includes mandatory training and 1,800-plus custom GPTs built in four months, following a similar large-scale deployment at Spain's BBVA.

Vendor-reported results: institutional onboarding document mapping cut from about 2.5 weeks to 3 days, with 3.5% of documents escalated to human review.

The custodian bank and Microsoft's Frontier Company unit report 96.5 percent first-pass quality on institutional onboarding data, with the remaining 3.5 percent routed to human review.

The financial regulator's operating instructions include 24-hour monitoring, penetration testing, attack simulations and IT audits, following roughly 999,000 blocked attacks against the financial sector in a day.

The directive covers transaction suspension for clarification, penetration testing, IT audits, and the activation of the OJK-BI Cyber Incident Response Team (TTIS).

The tax office's SPP-TDLN mechanism takes effect Monday; personal transfers and remittances are not subject to the VAT collection, and additional issuers await stabilization.

The DJP mechanism for collecting VAT on foreign digital transactions took effect on 9 November 2026, with BRI, Mandiri, BNI, BTN, BSI, and LinkAja as the first appointed issuers.

The supervisor says it is examining the bank's liquidity and cash management, and will take supervisory steps proportionate to the severity of what it finds.

The banking supervision chief says OJK IT examiners have coordinated with tech staff at every bank since last week, and that external providers can create security gaps.

HSBC, NatWest, Barclays, Lloyds and Nationwide moved as the FCA drafts rules, while US identity vendor Socure launched detection and trust scoring for known agents.

The bank's updated online access agreement, effective 24 November, treats instructions from third-party AI agents as customer-authorized and obliges customers to produce revocation evidence on request.

Digital banking vendor Finshape has integrated agentic AI into its Digital Bank Operating System, applying AI agents to analysis, design, configuration and testing rather than customer-facing chatbots.

Indonesia's Financial Services Authority has approved the consolidation of four rural banks into PT BPR Arthaguna Mandiri, effective 10 August 2026, urging real integration across operations, technology and governance.

Swiss sovereign cloud provider PHOENIQS AG and Indonesia's Nongsa Digital Park have signed an MoU to develop sovereign AI services for banks, public institutions and manufacturers, with joint pilots planned in Batam.

Danish fintech Subaio has launched an MCP server that connects bank accounts to AI assistants such as ChatGPT and Claude via PSD2 open banking, with read-only access and no credential sharing.

Singapore-based regtech firm WIDTH has partnered with Indonesian solution provider Nawadata to strengthen fraud prevention, risk management and regulatory compliance in the national banking sector.

The fourth revision of the DHE regulation also extends relaxation to South Korea, Japan and the EU, expands eligible banks to 16, and requires active disclosure of foreign parent structures.

Fresh regulator statistics also show 737,686 fraud-reporting system submissions and 94,363 consumer complaints this year, alongside an identity-based expansion of illegal-gambling account hunts.

The regulator imposed 121 administrative sanctions with fines totaling Rp8.84 billion and completed 191 criminal cases, 80 percent of them in banking. The Indonesia Anti-Scam Center recorded 737,686 reports since November 2024.

Loans secured by natural-resource export proceeds qualify as performing and are excluded from the NPL ratio — but only if banks verify usage evidence and exporter statements under the DHE regulation.

The banking-as-a-service provider raised USD 24.5 million, bringing total funding to USD 126.7 million, with capital directed toward continuous compliance testing technology from its April 2026 acquisition of Cable.

The funding, bringing Synctera's total to $126.7M, follows its April acquisition of Cable, whose platform runs continuous automated compliance testing across sponsor banks and fintechs.

Federal Reserve and OCC supervisors began contacting banks about unusual activity after the late-October theft, Reuters reports. India's CERT-In separately named a threat actor targeting fintech endpoints.

The Fed and OCC began checking bank systems for anomalies after the record crypto exchange theft, while India's CERT-In warned of 'CRAFTY FALCON' attacking fintech APIs on weekends.

US users can now connect bank accounts and credit cards to Claude through Plaid, with read-only access to balances and transaction history.

The payments company recorded a net reserve of $764 million for a proposed deferred prosecution agreement over Bank Secrecy Act violations.

New transaction limits on BNI Mobile Banking took effect on 1 November as the bank phases out its legacy app in favor of wondr by BNI through 30 November.

The UPI operator announced NPCI Tech Solutions Limited on 4 November, its fourth subsidiary, led by the group CTO.

The OJK says it is examining MNC Bank's liquidity and funding after MotionBank disruptions, and has requested a schedule for fulfilling customer rights.

HSBCnio unifies transaction banking services (cash positions, payments, trade loans, FX) across web/mobile/API, and opens read-only access for client AI tools via MCP (Anthropic's open standard), under existing HSBCnet permissions and controls. Use cases: liquidity forecasting, variance analysis, reporting. Plann

The OJK revoked the license of PT BPR Agritrans Batumarta (OKU, South Sumatra) after failed capital remediation — CAR below 12% since November 2025, under special surveillance status since October 16, 2026, with the LPS requesting liquidation. A total of 16 banks had their licenses revoked in 2026 (through November 4). In parallel: OJK West Java announced the merger of 3 BPRs (Sejahte

The OCC (US regulator of national banks) published its first AI supervision framework. Examiners classify AI use cases based on 3 factors: (1) potential consequences of failure, (2) the shift of agency from humans to systems, (3) the degree of human oversight — not technical sophistication. Official example: an AI age

Of 91 Indonesian banker respondents: 73% rated digital sovereignty highly relevant to the transformation agenda over the next 12–24 months; relevance scored 3.98/5 but the maturity of AI governance processes (documentation, validation, performance monitoring, periodic review, human oversight) was only 2.74/5. 82% cited data p

The OCC's new bulletin measures AI risk by agent autonomy and consequence severity rather than model sophistication — a design standard likely to influence bank regulators worldwide.

The KSSK meeting lowered the maximum reserve requirement to 5 percent and extended liquidity incentives for job-creating lending, effective 1 December 2026.

Indonesia's state mortgage bank is procuring OCR and intelligent document processing for consumer lending, open to small, medium and large vendors.

HKMA introduced know-your-agent principles and supervisory registries as Singapore's MAS opened a Future of Finance Institute to guide AI adoption in banking.

Two years of data from the national fraud task force show hundreds of thousands of accounts frozen and Rp825.2 billion secured, with regulators ordering banks to sharpen detection.

India's largest bank reports analytics-led advances up 29.4 percent year-on-year as its Project SARAL models prioritize collection actions at account level.