Your next bank customer might not be human: Feedzai helps banks spot AI agents at the front door
Feedzai, the global leader in AI-native financial crime prevention, today expanded its Digital Trust solution to help banks detect AI agents accessing customer accounts. “The expansion sets the stage for agentic detection at scale: stronger device persistence, a fraud score built on Feedzai’s network view and shared intelligence, and cryptographic device binding that creates a triangle of trust between the customer, their device and the bank. These same pillars also deliver value on their own, helping banks remove unnecessary step-ups, cut authentication costs, and strengthen protection against MFA bypass.” – according to the press release.
A successful login does not mean a session can be trusted. AI agents can sign in with valid credentials, and criminals exploit compromised devices, account recovery, and social engineering to manipulate real customers. Feedzai’s Digital Trust combines endpoint, device, behavioral, and network signals to assess risk before login and throughout the customer journey.
“A leading agent detection strategy starts with a foundation banks can trust: protected signals, cryptographic device recognition and network intelligence,” said Pedro Barata, Chief Product Officer at Feedzai. “Personal and malicious agents can look very similar. Our latest advancements in Digital Trust help banks tell them apart, blocking unwanted agents and trusting the ones their customers choose to use.”
Building the foundation for agentic trust
Recognizing an AI agent starts with knowing the device, trusting the signals you can gather, and the intent behind every session. Feedzai’s Digital Trust’s persistent device fingerprinting and network signals recognize returning activity over time, while its risk score draws on Feedzai’s network view and shared intelligence to surface signals a single bank could miss. Cryptographic device binding ties each session back to a known customer and device, so banks can see who an agent is acting for.
These capabilities give banks the foundation to detect and manage AI agents at scale. Feedzai’s Digital Trust identifies agents by combining the signals they declare about themselves with device fingerprinting and behavioral signals that reveal automated activity. Once an agent is recognized, banks can trust returning user-agent relationships and avoid challenging them again where their policies allow, while keeping full control over which agent activity is allowed and how customer consent is handled. Feedzai will continue to expand its agentic detection capabilities in the coming months.
Stronger authentication, fewer step-ups
Another key benefit of the release is stronger human authentication with less reliance on SMS one-time passcodes. Cryptographic device binding links the customer, their device and the bank, so a trusted device can act as a possession factor and reduce the cost and risk of OTPs. Feedzai’s Digital Trust also protects passkeys against bypass attacks by confirming that a registered device is present and checking it for signs of compromise or social engineering. That protection covers login, account recovery, new device enrollment, and call center authentication linked to a digital session.
“Overreliance on weak multifactor authentication (MFA) is prevalent: 95% of banks use MFA, with one-time passwords (OTPs) sent via SMS as the most commonly cited method by Gartner clients,” said Vatsal Sharma, Director Analyst on the Banking team at Gartner. “However, growing tactics like social engineering, SIM swapping, and phishing can bypass such MFA, creating a false sense of security and requiring layered controls.”
