Internal auditors at Brazilian retail banks should train to audit AI agents that triage Pix fraud alerts, check payroll-deductible loan contracts and assemble account-opening files. The skills: testing verdicts and approvals in the record, certificate currency, provenance and red lines on moving money. Audit opinion stays with them. Banco Central do Brasil, the LGPD and the ANPD frame oversight.
What do internal auditors at a Brazilian retail bank cover?
Pix changed the risk profile of retail banking. Instant, always-on transfers brought social engineering fraud, account takeover and mule accounts, and auditors now test how fraud alerts are triaged, how fast suspicious transfers are blocked, and how the bank handles requests to return funds through the Pix mechanism for fraud cases. Account opening at scale, often entirely digital, is tested for identity checks and mule detection.
Credit is the other big area. Payroll-deductible loans to employees, retirees and pensioners are a major product and a frequent source of complaints about unauthorised contracts and aggressive selling. Auditors test contract authorisation, consent records and the handling of complaints. Banco Central do Brasil expects banks to maintain internal controls, compliance and an independent internal audit function, and auditors report to the audit committee.
What changes when agents arrive?
Banks are placing agents in these flows, each at a depth earned on the bank's own past cases.
- Pix fraud alert triage (depth 2). The agent gathers device, account and transfer history and drafts a disposition. An analyst decides whether to block or release.
- Payroll loan contract checks (depth 1). It compares the signed contract, consent evidence and borrower data, flagging contracts where consent is missing or inconsistent.
- Account opening file assembly (depth 2). It assembles identity evidence and drafts the onboarding decision for an analyst.
- Complaint replies (depth 2). It drafts replies in Portuguese citing the contract and account history. An officer sends.
Audit's own agent, at depth 1, can test full populations from the append-only record, such as every Pix alert released in a month and who released it.
What must auditors learn, and what stays with them?
Red lines first. Some actions should never be allowed to an agent in a retail bank: releasing a blocked Pix transfer on its own, approving a payroll loan without consent evidence, or changing a customer's registered Pix key on the strength of an inbound message. Our list of what internal auditors should never let an AI agent do gives a base. Auditors should test that each of these was refused or held, and that some actions, such as reversing a settled payment, are withheld at the platform floor for every agent.
Provenance is the second skill. Consent captured in the bank's own system is sealed; a scanned form uploaded by a correspondent is external until verified. For payroll loans, the audit test is whether any contract rested on external consent evidence alone.
Certification is the third. Depth is earned, not configured: the role sets a ceiling, Attest evidence sets the depth, and the lower wins. Certificates lapse after 90 days. Auditors should test certificate history against the dates of the decisions they sample.
Practical experience helps. Auditors who go through a reviewer practicum learn what careful review looks like. Our guide on how to run a two-week practicum for internal auditors explains the format; Pryme Intelligence Academy's Operator track uses one with an assessor's sign-off.
What stays with the auditor: the plan, the opinion, ratings and the report to the audit committee. Our piece on whether AI agents will replace internal auditors makes the case for why.
Which Brazilian rules shape oversight and literacy?
Banco Central do Brasil supervises banks and operates Pix. It expects internal controls, risk management, compliance and independent internal audit, and it sets rules on Pix security, including fraud prevention and the return of funds in fraud cases. When agents triage alerts or prepare onboarding decisions, they sit inside controls the central bank already supervises.
The LGPD governs customer data and the ANPD supervises it. The LGPD gives customers the right to ask for review of decisions taken solely on automated processing that affect their interests, including credit decisions, so the bank must show where a person decided. The CVM supervises securities markets and matters only where retail banking touches investment products.
AML and counter-terrorist financing obligations follow the FATF Recommendations, with suspicious transactions reported to Brazil's financial intelligence unit. Cross-border, the Basel Committee's operational resilience principles and ISO/IEC 42001 help structure an AI audit.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
A 90-day training plan
Days 1 to 30. All auditors learn depth, the minimum chain, the four verdicts and the record. The chief audit executive maps every agent, its capabilities and certificate dates.
Days 31 to 60. Pilot an audit of Pix fraud alert triage. Test every released alert for who decided, what evidence was used, and certificate currency. Two auditors start a practicum.
Days 61 to 90. Extend to payroll loan consent checks, write the standing programme, and use the training plan template for internal auditors. Set up banking corrections for audit's agent.
Questions people ask
Can an agent block a Pix transfer on its own?
Blocking a suspicious transfer can be allowed at depth 3 within the bank's limits, since it protects the customer and can be reviewed. Releasing a blocked transfer should be held for an analyst.
How do auditors test payroll loan consent?
By sampling contracts from the record and confirming that consent came from a sealed source and that inconsistencies were held for a person.
Does the LGPD right of review apply to fraud blocks?
It can apply to decisions affecting a customer's interests. The bank should be able to show a person reviewed contested blocks. The guide to AI agent skills by role covers who does what.