At Money 20/20 this week, a stark warning cut through the industry's characteristic optimism: the financial system is not moving fast enough to confront the illicit finance and fraud risks being unleashed by agentic artificial intelligence and blockchain technology. The caution came from a former official who served at both the U.S. Department of the Treasury and the National Security Council — institutions that sit at the intersection of financial integrity and national security — and the message was unambiguous. Regulators and industry players alike are underestimating, in the official's own words, "the need for true, timely action."
That phrase deserves to land with weight. It did not emerge from a think-tank paper or an academic symposium. It came from someone who has operated inside the machinery of American financial oversight and national security, who understands both the velocity of modern financial crime and the institutional inertia that so often hampers a proportionate response. The convergence of agentic commerce — autonomous AI systems capable of executing financial transactions without direct human instruction — and the borderless, pseudonymous nature of blockchain infrastructure represents a category of risk that existing compliance frameworks were simply not designed to address.
A New Risk Architecture That Compliance Has Not Caught Up To
Agentic AI is no longer a speculative concept confined to research laboratories. Systems capable of browsing the internet, executing purchases, managing accounts, and interacting with financial rails on behalf of users — or, critically, bad actors — are scaling into mainstream deployment. When these capabilities intersect with blockchain-based payment channels and decentralized finance protocols, they create transaction pathways that can move value across jurisdictions in milliseconds, with minimal human touchpoints and a compliance audit trail that traditional anti-money laundering systems struggle to reconstruct.
The fraud surface area alone is staggering. Agentic systems can be weaponized to conduct credential-stuffing attacks, orchestrate synthetic identity fraud at industrial scale, or execute layering schemes across decentralized exchanges faster than any human compliance officer could flag a suspicious activity report. The financial crime typologies that Financial Action Task Force guidance was built around — cash-intensive businesses, correspondent banking exposure, trade-based money laundering — are being supplemented by entirely new vectors that the current regulatory lexicon has barely begun to name.
The Collaboration Imperative
What made the Money 20/20 warning particularly pointed was not simply the diagnosis of risk, but the identification of where the failure lies: in the relationship between regulators and the private sector. The argument, implicit in the framing of "true, timely action," is that neither party is moving with sufficient urgency, and that the gap between them — in information sharing, in rulemaking speed, in supervisory imagination — is itself a vulnerability that bad actors are already exploiting.
This is a familiar structural problem in financial regulation, but agentic AI and blockchain compress the timeline in ways that make the old rhythms of regulatory consultation and notice-and-comment rulemaking genuinely dangerous. By the time a working group produces a report on agentic commerce risks, the technology generating those risks may already be two generations more sophisticated. Regulators at the Office of the Comptroller of the Currency, the Federal Deposit Insurance Corporation, and the Federal Reserve are each grappling with how their existing supervisory mandates extend — or fail to extend — to systems that blur the line between financial service provider, software agent, and autonomous market participant.
Industry, for its part, carries its own share of responsibility for the current inertia. The fintech and banking sectors have long advocated for regulatory clarity as a precondition for compliance investment, a posture that can shade into using regulatory ambiguity as a competitive shield. If agentic platforms and blockchain infrastructure are being deployed at scale into payment and lending ecosystems, the firms operating them cannot simultaneously argue that the rules are too unclear to comply with while continuing to scale adoption.
What This Means for the Financial System
The urgency articulated by the Treasury and National Security Council alumnus at Money 20/20 reflects a broader recognition that the financial system is entering a period of structural transformation that carries systemic, not merely operational, risk. The illicit finance threat is not theoretical — blockchain analytics firms have documented billions of dollars in crypto-denominated fraud and sanctions evasion in recent years, and the emergence of autonomous AI agents as transactional participants will only multiply the attack surface.
The path forward requires something the financial regulatory ecosystem has historically found difficult: genuine real-time collaboration between public institutions and private innovators, with information flowing in both directions and rulemaking that is adaptive rather than retrospective. Sandbox frameworks, public-private threat intelligence sharing, and pre-competitive industry standards for agentic system behavior are all mechanisms that exist in partial form and need urgent acceleration. The warning from a veteran of America's most consequential financial and security institutions should not be received as routine conference commentary. It is a signal that the window for proactive governance is narrowing, and the cost of missing it will be measured in financial crime at a scale the system has not yet encountered.
Written by the editorial team — independent journalism powered by Codego Press.