arXiv AI

Securing Agentic Commerce Through Behavior-Aware Fraud Detection and Cybersecurity for Trusted AI-Agent Payment Authorization

The paper introduces the Autonomous Commerce Agent Guard System (ACAGS), a cybersecurity framework that uses supervised machine learning, behavioral analytics, agent‑specific authorization controls, and explainable AI to protect autonomous AI agents in digital commerce. Evaluated on synthetic financial data with five adversarial scenarios, ACAGS achieved high detection rates—99.77% for abnormal behavior, 99.73% for impersonation, and 100% for malicious delegation—while improving F1‑score from 52.12% to 69.46% with behavioral and agent‑specific features. The system also supports APPROVE, REVIEW, and REJECT authorization outcomes, with SHAP explanations providing interpretability.

arXiv AI
Oct 9

An Autonomous AI Security Agent for Banking: Multi-Vector Fraud and AML Detection Across Retail and Corporate Accounts

The paper introduces an autonomous AI security agent designed to detect multi‑vector fraud and anti‑money‑laundering (AML) threats in both retail and corporate banking. It operates across two parallel event streams—transactions and sessions—using a fusion of LSTM behaviour models, statistical velocity monitors, and graph‑based account‑counterparty analysis. Experiments on a synthetic dataset show the agent outperforms rule‑based and LSTM‑only baselines, achieving F1 scores of 0.787 for transactions and 0.867 for sessions, while also providing rapid, low‑latency responses and supporting customer verification and analyst assistance.

By Joseph Walusimbi, Joshua Benjamin Ssentongo
arXiv AI
Sep 30

Agentic Commerce Bench: Measuring Fraud Detection for Agents That Spend Money

The paper introduces the Agentic Commerce Bench (ACB), a benchmark for measuring fraud in AI agents that autonomously spend money. It presents a taxonomy of agentic commerce fraud, a dataset of twenty fraud classes derived from real production data, and an open‑source detector stack called gordonguard for auditing and replaying hostile counterparties. The study shows that current reasoning layers and security scanners perform poorly on many classes, highlighting the need for better detection mechanisms.

By Ankit Srivastava, Debjyoti Paul
arXiv AI
Jun 17

An AI Security Agent for Banking: Multi-Vector Fraud and AML Detection Across Retail and Corporate Accounts

arXiv:2606. 17555v1 Announce Type: cross Abstract: Banks simultaneously face signature-based fraud (card-not-present attacks, account takeover, ATM cloning) and behavioural financial crime (structuring, layering, mule networks, business email compromise) -- two threat families with fundamentally different detection requirements.

By Joseph Walusimbi, Joshua Benjamin Ssentongo
arXiv AI
2d ago

ScamWorld: An Interactive Environment for Evaluating Web Agents Against Online Fraud

ScamWorld is an interactive environment that recreates reported scam websites across various scenarios, fraud mechanisms, and languages, allowing researchers to observe fraud indicators before a web agent’s final action. The platform enables controlled, repeatable evaluation of web agents, which are increasingly used to browse, shop, and manage accounts on the open web. A study of six leading LLM-powered agents revealed deception rates between 11% and 35%, with agents more likely to proceed with payments than to provide credentials or wallet information, and some agents continuing after recognizing suspicious conditions.

By Yutao Wu, Xiao Liu, Ming Wen, Hanxun Huang, Jun Wang, Xingjun Ma
arXiv AI
2d ago

Agent Security is a Systems Problem

arXiv:2605.18991v3 Announce Type: replace-cross Abstract: We take the position that agent security must be approached as a systems problem: the AI model powering the agent must be treated as an untru...

By Mihai Christodorescu, Earlence Fernandes, Ashish Hooda, Somesh Jha, Johann Rehberger, Kamalika Chaudhuri, Xiaohan Fu, Khawaja Shams, Guy Amir, Jihye Choi, Sarthak Choudhary, Nils Palumbo, Andrey Labunets, Nishit V. Pandya
arXiv AI
Aug 20

FraudBench: Stress-Testing Policy-Grounded Banking Agents Against Adaptive Fraud

FraudBench is a new benchmark that tests policy‑grounded banking conversational agents against adaptive fraud scenarios. It uses a dual‑control framework and a 698‑document internal policy corpus, presenting 150 adversarial scenarios (107 public, 43 held‑out) that require agents to manage mutable account state and tool access while preventing identity, authorization, and trust manipulation. Preliminary results on four agents show attack‑security rates between 49% and 65%, highlighting weaknesses in money‑mule and first‑party fraud detection.

By Dheeraj Mohandas Pai, Lu Xian