UK payment firms' compliance teams can use AI agents to assemble authorised push payment scam reimbursement files, spot mule account behaviour on incoming payments, reconcile safeguarded funds daily and test that payee name checks reach customers. Under the FCA, the PSR and SM&CR, people decide reimbursements, account closures and suspicious activity reports.
What do payments compliance teams in the UK spend their time on?
UK payment and e-money institutions, and the payment businesses of banks, sit under the FCA for conduct and authorisation and the PSR for payment systems. The UK's fast payment system settles in seconds, which has made it a target for scams, and UK rules have responded.
Scam reimbursement. The PSR requires sending firms to reimburse most victims of authorised push payment scams on the fast payment system, with the cost shared between sending and receiving firms and limited exceptions where the customer fell well below the expected standard of care. Every claim needs an assessment, a decision and a record.
Mule accounts. Receiving firms share the cost of scams, which gives them a strong reason to detect accounts receiving stolen funds and moving them on quickly.
Safeguarding. Payment and e-money institutions must safeguard customer funds and reconcile them frequently. The FCA has increased its scrutiny of safeguarding after firm failures left customers waiting for their money.
Payee name checks. A name-checking service lets payers see whether the account name matches before paying. Compliance tests that results are shown clearly and that warnings are effective.
Consumer Duty. All of this sits under the FCA's requirement to deliver good outcomes for retail customers.
Where can AI agents help?
Depth caps how far an agent may act: 1 reads, 2 drafts for a person, 3 executes routine work within bounds.
| Use | What the agent does | Depth |
|---|---|---|
| Scam reimbursement files | Assembles the payment, warnings shown, name-check result, customer statements and any vulnerability flags, and drafts an assessment against the reimbursement rules | 2 |
| Mule account signals | Flags accounts receiving payments from many unrelated senders and moving funds out quickly, with the evidence | 1 |
| Safeguarding reconciliation | Compares customer funds owed with safeguarded balances daily and reports differences | 1 |
| Name-check outcome testing | Samples payments with a no-match or close-match result and checks what the customer saw before paying | 1 |
| Agentic payment monitoring | Checks that payments started by customers' AI agents carry the customer's authority and stay within limits | 1 |
Scam reimbursement files are the most UK-specific use. Volumes are high, the rules are detailed, the deadlines are short, and every file follows the same structure. For payments started by customers' own agents, see what is agentic payments.
What stays with people?
Reimbursement decisions. Whether a customer is reimbursed, and whether an exception applies, is a decision with direct financial and fairness consequences. Applying an exception wrongly is exactly the outcome Consumer Duty is meant to prevent. A person decides and records why.
Account closures and restrictions. Closing a suspected mule account, or freezing incoming funds, affects someone who may be a victim themselves. A person decides.
Suspicious activity reports. The money laundering reporting officer decides what to report to the national crime agency's financial intelligence unit.
Safeguarding breaches. Deciding how to correct a shortfall, and whether to notify the FCA, belongs to the accountable senior manager.
Recalling payments. Fast payments settle in seconds and recovery is uncertain. The explainer on what is instant payments covers why speed raises the stakes.
Which UK rules apply?
The UK has no single AI law. Its principles-based, regulator-led approach applies existing rules to AI. See how AI agents are regulated in the United Kingdom.
FCA. Authorises and supervises payment and e-money institutions, including safeguarding, conduct, complaints and AML systems. Consumer Duty applies to outcomes that agents help produce.
PSR. Regulates payment systems, including scam reimbursement rules on the fast payment system.
SM&CR. Applies to banks and to many FCA-authorised firms. Map each agent to the senior manager accountable for the activity. Where a payment institution sits outside SM&CR, name an equivalent owner anyway.
ICO, UK GDPR and the Data Protection Act 2018. Scam claims often include sensitive personal circumstances. Restrictions on decisions based solely on automated processing with significant effects support keeping reimbursement decisions with people.
FATF Recommendations shape the UK's AML regime.
Cross-border. Firms with EU entities meet PSD2, the Instant Payments Regulation, DORA and the EU AI Act there. For AML teams specifically, see the EU AI Act and AI agents in compliance and AML teams.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
How to start in the first 90 days
Month one. Map the agent to its senior manager and complete the impact assessment. Start with scam reimbursement files, because the deadlines make assembly time valuable.
Month two. Replay the agent against closed claims. Compare its draft assessments with your decisions, paying most attention to any case where it would have applied an exception you did not.
Month three. Run live, with every claim decided by a handler who starts from the agent's file. Add daily safeguarding reconciliation. UK insurers share the FCA but face different rules; see compliance agents in UK insurance.
Where Pryme fits
In Pryme, a reimbursement file agent drafts at depth 2 and its recommendation arrives held for the named handler. Paying the claim is depth 4 and outside its role scope, so it is refused. Attest replays it against your own closed claims, scoring escalation and harm separately. Every verdict is filed, which supports PSR and FCA reviews. The guide to AI compliance agents sets out the principle.
Questions people ask
Can an AI agent decide APP scam reimbursement claims?
No. It can assemble the file and draft an assessment. The decision, especially on any exception, stays with a person accountable for the outcome.
Should receiving firms use agents to find mule accounts?
They can use agents to surface patterns quickly, since they share the cost of scams. Any restriction or closure must be decided by a person, because the account holder may also be a victim.
Does Consumer Duty apply to an internal compliance agent?
The Duty applies to customer outcomes. An internal agent that drafts reimbursement files shapes those outcomes, so test its drafts for fairness as well as accuracy.