South African retail banks should train AML investigators to check what an agent assembles on cash deposit, procurement and politically exposed person cases, recognise when it trusts weak sources, and keep every report, restriction and exit decision with named people. Team calibration matters, because the agent learns from whatever standard investigators feed it.
What occupies an AML investigator at a South African retail bank?
The cases reflect the economy. Cash remains central, and cash-accepting ATMs let people deposit notes without visiting a branch, sometimes on behalf of others. Investigators look for deposits structured across machines and days, third-party deposits into accounts that then send funds abroad, and cash flows linked to illegal mining, wildlife trafficking or other proceeds of crime.
Corruption-related cases are a second stream. Public officials and their relatives bank like everyone else, and investigators review accounts that receive payments from businesses that win public contracts, or whose wealth outpaces a public salary. These cases need enhanced due diligence, careful evidence and senior sign-off. Alongside them come reports to the national financial intelligence unit, responses to its requests and to law enforcement, and recommendations to exit relationships.
Where can agents take on work, and at what depth?
Cash deposit pattern analysis (depth 1). The agent groups cash deposits by depositor, machine, time and beneficiary account, and flags patterns that suggest structuring or third-party funding. It shows; the investigator decides.
Procurement-linked flow detection (depth 1). The agent links accounts of customers identified as public officials with payments from businesses, using the bank's own records and company registration data. A link is a question, not an answer.
Enhanced due diligence files (depth 2). For politically exposed customers, the agent assembles relationship history, declared source of wealth, supporting documents and adverse media, each labelled with its provenance, and drafts the review.
Report drafting (depth 2). Once suspicion is formed by the investigator, the agent writes a first draft of the report, listing each fact beside its source.
Exit proposals (depth 4, held). Closing a retail account affects someone's ability to be paid and to pay. The agent drafts the proposal; named people decide.
Which skills matter most?
Which AI agent skills matter most for AML investigators gives the ranking. In South African retail banking, provenance comes first. Deposit records are sealed. A company registration record from the official registry is signed. A customer's explanation of a cash business is declared. A press report on a tender is external: it can prompt a question, but it cannot establish a fact. An agent that lists a press report as proof of wrongdoing has made a serious error, with consequences for the customer and the bank.
Second is reading the bound that decided a verdict, so the investigator knows whether a held exit is held because policy requires a senior decision or because the agent lacked evidence. Third is correction: when investigators overrule the agent on a recurring legitimate pattern, such as cash takings from spaza shops, the fix belongs in its brief, using the method in banking corrections that improve the agent.
What must the agent never do, and why calibrate?
The agent must never tell a customer, branch or relationship manager that a report has been made, never close or restrict an account, never treat a press report as fact, and never decide to report. The list, with reasons, is in what AML investigators should never let an AI agent do. These are judgements that make investigators the real control.
Calibration is the safeguard against inconsistency. Politically sensitive cases invite different instincts: one investigator escalates every official, another waits for hard evidence. Calibration sessions for AML investigators settle a shared standard on real cases before corrections reach the agent.
Which South African rules shape oversight and training?
South Africa's financial intelligence law requires banks, as accountable institutions, to maintain a documented risk management and compliance programme, apply customer due diligence including enhanced measures for domestic and foreign politically exposed persons, report suspicious and unusual transactions to the national financial intelligence unit, and train staff. Agent-assisted investigations should be described in that programme, with training records to match.
The Prudential Authority, part of the South African Reserve Bank, supervises banks' safety and soundness, and the FSCA oversees conduct. Both will expect that changes to how a bank investigates customers are governed. The Protection of Personal Information Act (POPIA), enforced by the Information Regulator, governs the personal information the agent processes and limits decisions about people based solely on automated processing, which supports keeping exits with people.
The FATF Recommendations set the international standard on politically exposed persons, due diligence and reporting that South African law reflects.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
A 90-day plan
Days 1 to 30. Investigators complete foundation learning using the bank's own closed cash and PEP cases. The agent runs at depth 1 on cash patterns and procurement-linked flows in one province.
Days 31 to 60. The agent drafts enhanced due diligence files and reports at depth 2. Every draft is reviewed. Weekly calibration agrees on contested cases, especially those involving officials. Corrections are banked.
Days 61 to 90. Investigators who decide held exits and approve reports complete certification and a supervised practicum, such as Pryme Intelligence Academy's Operator track. The compliance programme is updated. Exits stay held.
For relationship managers, branch staff and the compliance function, see AI agent skills by role.
Questions people ask
Can the agent identify politically exposed persons?
It can match customers against the bank's PEP sources and flag likely matches at depth 2. Confirming status and deciding the response stay with people.
How should cash deposits by third parties be handled?
The agent flags them and shows who deposited where it is known. Whether they are legitimate is a judgement for the investigator.
What if a press report names a customer?
Treat it as external. The agent can attach it to the file, and the investigator decides whether it changes the risk view.