FraudBench is a new benchmark that tests policy‑grounded banking conversational agents against adaptive fraud scenarios. It uses a dual‑control framework and a 698‑document internal policy corpus, presenting 150 adversarial scenarios (107 public, 43 held‑out) that require agents to manage mutable account state and tool access while preventing identity, authorization, and trust manipulation. Preliminary results on four agents show attack‑security rates between 49% and 65%, highlighting weaknesses in money‑mule and first‑party fraud detection.
By Dheeraj Mohandas Pai, Lu Xian
The paper introduces the Agentic Commerce Bench (ACB), a benchmark for measuring fraud in AI agents that autonomously spend money. It presents a taxonomy of agentic commerce fraud, a dataset of twenty fraud classes derived from real production data, and an open‑source detector stack called gordonguard for auditing and replaying hostile counterparties. The study shows that current reasoning layers and security scanners perform poorly on many classes, highlighting the need for better detection mechanisms.
By Ankit Srivastava, Debjyoti Paul
arXiv:2609.34211v2 Announce Type: replace
Abstract: In financial fraud detection, rich semantic context can provide important evidence for transaction behavior modeling and fraud reasoning. However,...
By Linbo Shao, Huilin He, Yating Lou, Dawei Cheng
S$^2$-MAS is a multi‑agent simulation framework that uses 500 million synthetic household personas to model economic responses at society scale. It integrates trainable candidate‑scoring policies, reusable financial scenarios, and explicit state transitions, and has been trained on 2.93 million examples to achieve high accuracy on consumer financial‑choice tasks. Experiments demonstrate the framework’s ability to evaluate millions of households across different purchase‑funding conditions, revealing heterogeneous consumption and repayment patterns driven by policy decisions and accounting rules.
By Yang Li, Yike Wang, Di Wan, Chujun He, Zongsi Xu, Yitao Yu, Shuai Zhong, Minghao Pan, Quanfeng Lu, Xiyu Chen, Sheng Zhong, Deng Binjie, Yichen Guo, Zhenwei Guo, Hou Jun, Kunhan Guo, Weihao Lin, Tuo Zhou, Hai Liu, Chenwei Wu, Jianyuan Zhong, Xilin Dai, Ye Luo
The paper "Financial Fragility in Societies of LLM Agents: Coordination Failures and Stabilizing Mechanisms" investigates how large language model agents can collectively cause financial failures when making individual protective decisions. Using the FRAIL framework, the authors simulate bank runs, debt rollovers, and reward crowdfunding, finding that 77% of bank-run and 83% of debt-rollover episodes fail even without malicious agents. They test three interaction mechanisms—compensated commitments, centralized agreements, and participant-led coalitions—each improving outcomes but none dominating across all scenarios, noting that early broad commitments are key to successful stabilization.
By Zhenhao Fu, Ruipeng Xu, Qibing Ren
SR‑Fraud is a framework that uses a frozen, stateless LLM agent to score transactions in real time while an offline reflection agent proposes boundary hypotheses based on matured errors. The system then verifies these hypotheses deterministically before updating its knowledge state. On a production payment‑fraud benchmark, SR‑Fraud outperforms both static and periodically retrained CatBoost models and successfully detects an emerging fraud burst.
By Xuwei Tan, Yao Ma, Xueru Zhang