Money20/20 USA Uncovers Hidden Risk in Fintech's Core
Day two of Money20/20 USA revealed the financial industry's proactive efforts to address risk and liability in automated money movement by developing new standards and codes. Key discussions revolved around industry-led certifications for AI agents, the convergence of tokenized deposits and stablecoins, and the need to update existing controls that now bottleneck rapid payment innovations. The focus has shifted from merely askingDay two of Money20/20 USA highlighted a significant shift in the financial industry's approach to the burgeoning question of risk and liability in an era where money moves autonomously. While day one focused on identifying who bears the risk when AI agents initiate transactions, day two showcased the industry's proactive stance in building solutions through standards, certificates, and code, rather than passively awaiting regulatory intervention.
A key theme emerging was the transition from merely questioning liability to actively establishing accountability across the entire financial chain. FDIC Chairman Travis Hill, in a keynote conversation with Penny Lee of the Financial Technology Association, discussed an industry-run, voluntary standard-setting body. This initiative aims to assist banks and fintechs by allowing independent assessors to vet third parties against common standards, thereby enabling community banks to rely on these assessments without conducting individual due diligence on every fintech partner.
This principle is extending to AI agents. Visa, BILL, and Billtrust announced a pilot program where AI agents pay supplier invoices via portals, using Visa’s Trusted Agent Protocol, which replaces traditional logins. Similarly, Evervault introduced short-lived tokens, allowing agents to complete checkouts without retaining sensitive card or password data. Elliptic launched a free certification for compliance staff overseeing AI agents, prompted by research indicating low confidence among professionals in governing such agents effectively. Despite these advancements, the ultimate bearer of liability for identity data shared between firms remains a complex issue, with Hill noting it extends beyond the FDIC's direct remit and requires a