Choose a scenario from the sidebar to explore how AI systems can be exploited in banking contexts.
Indirect Prompt Injection
The Poisoned Invoice
Processes incoming invoices, reads PDFs, extracts details, and queues payments
Natural Language Policy Exploitation
The Policy Loophole
Assists bank operations staff with transfers and can initiate transfers based on policy rules
Approval Authority Confusion
The Confirmation Trap
Assists wealth management advisors with client transfers. Handles client communication and logs approvals
Multi-Turn Context Manipulation
The Slow Boil
Supports relationship managers with client requests, account management, and can execute transactions within approved limits over ongoing conversations
Information Disclosure
The Helpful Mistake
Answers customer questions about their accounts, transactions, policies, and helps troubleshoot issues
Logging and Accountability Gaps
The Audit Ghost
Processes routine transactions, applies business rules, and logs all actions for audit trail