“What banks should prepare for?
Near term: keep investing in detection of automated attacks, compromised access, social engineering and anomalous transaction behavior. Those pressures are already here.
In parallel, start assembling the context needed for authorized participation as it becomes more common: agent identity, delegated authority, consent, access scope and the interface through which access was granted. Evaluate this context alongside the signals already in use.
The aim is not to forecast the exact shape of agentic banking. It is to avoid designing controls around a commerce pattern that does not yet apply to banking while remaining prepared for authorized agent access to mature.
The practical requirement is to identify the threat in front of the bank and apply controls suited to that threat.”