A preâmarket shuffle no one noticed
Just after dawn in London, a tierâone bankâs treasury bot scans the liquidity position, matches it to dayâahead cashâflow forecasts and silently sweeps ÂŁ210 million from a lowâyield reserve account into the overnight repo market. A risk notice and rationale land in the human treasurerâs inbox minutes later, but the decision, trade execution and journal entry were all performed endâtoâend by software. Similar scenes are playing out in creditâcard pricing teams in Singapore and fraudâmonitoring squads in New York. The common actor behind them is agentic AI: autonomous, goalâseeking systems that perceive, reason, act and, crucially, learn inside production environments.
Only eighteen months ago the conversation was still about prompt engineering. Today, the frontier has shifted to whether banks can allow software âcolleaguesâ to run unsupervised for minutes, hours or even days. The answer is already a tentative yes, and the implications, commercial, operational and regulatory, are profound.
From generative to agentic: adding the feedback loop
Generative AI dazzled executives by spinning up text, code and images; yet it still required a human hand on the prompt. Agentic AI bolts a continuous feedback loop onto that capacity. The agent ingests streaming data, evaluates it against a set of objectives and constraints, decides on an action, executes the action via APIs or internal systems and then watches the outcome to refine its future policy. The World Economic Forum has described this closedâloop autonomy as financeâs next step toward âprocess selfâgovernance.â It is not artificial general intelligence as each agent is still narrow, but when hundreds operate in concert, the functional perimeter of the firm begins to change.
Why finance?
Financial services deliver the very things agentic systems feed on: dense, structured data; repeatable, ruleâbound workflows; and markets that punish latency. The industry also suffers from margin compression: costâtoâincome ratios at many global banks still sit uncomfortably above 50 percent, which makes even small efficiency gains valuable. Finally, customers transact around the clock. A human trader may pause for sleep; an agent never does.
Those conditions explain why banks, asset managers and insurers have become early laboratories. The work rarely makes frontâpage news, but internal programme names: Quest IndexGPT, Eliza, GPT Store, are already part of everyday Slack chatter in the institutions that run them.
Quest IndexGPT: a data scientist that never clocks out
J.P. Morganâs assetâmanagement arm went live with IndexGPT in May 2024. The tool asks an LLM to generate keywords around an investment theme, for example, âcircular economyâ or âquantumâsafe cybersecurity,â then pipes the list into a separate NLP engine that trawls filings and news, scores corporate exposure and reâbalances a real index. Human portfolio managers still signâoff, but the cognitive lift has shifted to silicon. The bank touts faster timeâtoâmarket for bespoke thematic baskets and lower running costs for small, longâtail indices that would have been uneconomic under a fully human process.
BBVAâs GPT Store: autonomy through crowdsourcing
Spainâs BBVA took a different route. In late 2024 it rolled out an internal GPT Store where any employee could publish an approved agent and any colleague could reuse it. Within four months the store held roughly 3,000 microâagents handling tasks from legalâquery triage to sentiment analysis of callâcentre transcripts. Licence utilisation among the initial user base exceeded 80 percent, a figure that astonished even the bankâs AI leadership team. The lesson: once knowledgeâworkers taste autonomy at the task level, adoption can snowball without topâdown mandates.
BNY Mellonâs Project Eliza: custodianship meets ChatGPT
February 2025 brought another milestone when custody giant BNY Mellon announced a partnership with OpenAI to coâdevelop Eliza, a proprietary agentic platform set to underpin every product line from securities services to payments. BNYâs chief information officer framed the move bluntly: âWe no longer think of AI as a boltâon. It is the operating system of the bank.â The firmâs roadmap calls for thousands of selfâservice agents, each governed by a central risk office but deployed and iterated by business users.
2025: the âyear of the agentâ
If these early adopters feel niche, consider the macro trend. Executives polled at the Reuters NEXT summit predict that autonomous agents will dominate the AI agenda in 2025, shifting boardroom metrics from topâline growth to margin expansion as tasks that once consumed hours of analyst labour collapse to seconds of compute. Venture capital is shifting likewise: deal memos now obsess over agentâcentric architectures rather than foundationâmodel bragging rights.
Goldman Sachs analysts go further. In a March 2025 note they argue that tomorrowâs infrastructure superâcycle, billions in cloud capex, âhinges on AI agentsâ able to keep dataâcentre utilisation above 90 percent and dynamically arbitrage compute across regions. In other words, the financial logic of the cloud itself may soon depend on autonomous software rulers.
Regulators step onto the pitch
Supervisors are anything but idle observers. Singaporeâs Monetary Authority (MAS) completed a thematic review of AI modelârisk controls in midâ2024 and published a 28âpage information paper outlining expectations for generative and agentic systems, from dataâlineage tracking to killâswitch design. A followâup circular on cyberârisks highlighted the prospect of âmalicious prompt injectionâ that could redirect an agentâs objectives without breaching the underlying model, an attack vector far subtler than SQL injection yet potentially as damaging.
Across the Channel, the EUâs AI Act put financial applications into its âhighâriskâ tier, demanding technical documentation, human oversight and postâmarket monitoring. Critics warn the Actâs productâsafety framing will age badly as agents evolve, but for now compliance officers must treat every creditâscoring or roboâadvice agent as though it were a medical device. The Bank of Englandâs latest industry survey puts data protection, model explainability and talent shortages at the top of banksâ AI pain points, a hierarchy that neatly mirrors the MAS findings.
Governance moves from slides to sourceâcode
For years âhumanâinâtheâloopâ was the comfort blanket of AI risk frameworks; agents force a harder conversation. The emerging consensus looks like this: the board sets an agent charter linked to enterprise risk appetite; a central AI risk unit validates models, redâteams behaviours and signs off on every new objective function; immutable logs feed a realâtime dashboard monitored by operations staff authorised to pull the plug. Crucially, the failâsafe is coded as a circuitâbreaker on specific metrics, marketâvalueâatârisk spikes, unexplained model drift, rather than a generic panic button. MAS explicitly endorses such roleâbased, telemetryâdriven controls in its guidance.
Talent wars: less data scientist, more AI ops engineer
Autonomy also rewrites job descriptions. BBVA doubled its dedicated AI headcount to more than 400 in 2024 and opened âAI Factoriesâ in Mexico and Turkey. The fastestâgrowing title in this space is neither quant nor prompt engineer but âAI operations officerâ professionals fluent in Basel III liquidity ratios as well as retrievalâaugmented generation pipelines. These hybrid operatives babysit swarms of agents, write policy tests and negotiate with regulators. Banks that fail to cultivate such talent risk strangling innovation in secondâline approvals; those that succeed gain an engine of perpetual experimentation.
Competitive lines are redrawn
Who is best placed to own the agentic future? The card schemes start with global authentication rails and data on billions of transactions; add decision autonomy and they could morph into deâfacto creditâdecision utilities. Hyperscalers control the foundationâmodel stack and sell agent orchestration as a service; the danger for banks is dependency on computational landlords with competing retail ambitions. Incumbent banks retain the balanceâsheet licences and decades of labelled data, but they must move fast, often by taking equity stakes in startâups that supply agentic middleware.
The Path Ahead
By yearâend 2025, analysts expect agentic AI to run perhaps five percent of intraday liquidity buffers at global systemically important banks. The first supervisory stressâtests that explicitly model agent failure channels are penciled in for 2026. And by 2027, at least one advanced economy may permit autonomous underwriting for retail loans, matched by a new âalgorithmic accountabilityâ statute somewhere in Asia. Whether these dates slip or accelerate, the trajectory points in only one direction: deeper machine agency over the financial stack.
âTrust, but verifyâ
Agentic AI is not just another incremental efficiency play; it is a delegation of decision rights that strikes at the orthodox structure of a bank. The upside is extraordinary: 24âhour trading desks that never tire, personalised offers generated, and riskâpriced, in real time, operating ratios that finally look more like fintech than legacy finance. The downside, should governance fail, is systemic: blackâbox trades, cascading model drift, concentration risk in a handful of foundation models.
The pragmatic path is already visible in the institutions leading the charge: small, revenueâbearing pilots like IndexGPT; crowdâsourced innovation sandboxes like BBVAâs GPT Store; platformâlevel commitments like BNYâs Eliza; and regulatorâaligned guardârails that make every agent auditable by design. Banks that treat agents as genuine colleagues, complete with job descriptions, performance reviews and the occasional disciplinary memo, will convert the promise of autonomy into sustainable competitive advantage. Those that do not will discover, perhaps abruptly, that trust without verification is simply abdication.
Either way, when the markets open tomorrow morning, an invisible software coâworker will already have taken the first trade. It is time the rest of us caught up.

