AI Hallucination ResearchFindings by audienceSectorsInternational / MultilateralPayment InstitutionsCompliance › Implementation Monitoring of the PFMI: Level 3 Assessment on General Business Risks
Payment Institutions × Compliance — International / Multilateral · Last updated 11 Jun 2026 · methodology v2.3 · Hallucination Register
Share / Print X LinkedIn Email

AI Hallucination on Implementation Monitoring of the PFMI: Level 3 Assessment on General Business Risks for Compliance teams at Payment Institutions firms in international jurisdictions

Compliance teams at payment institutions whose regulatory framework references PFMI Principle 15 as part of their oversight envelope are increasingly using AI to scope Principle 15 readiness exercises, draft LNAFE buffer policy notes, generate cross-cycle assessment briefings for the CCO, and update regulatory-change registers on the November 2025 CPMI-IOSCO Level 3 findings. The November 2025 CPMI-IOSCO Level 3 assessment of general business risk, recorded under PFMI Principle 15, is the supervisory exercise most directly bearing on this practice area in the current cycle.

As AI tooling enters the drafting layer, the question is no longer whether AI-assisted work product reaches client-facing deliverables; it is whether the work product reaches them with the regulator-text fidelity that PI Compliance teams need.

The RLB Specialist Panel tested two frontier AI models on a question set covering the LNAFE quantitative floor, the Basel/CRD equity carve-out condition, and the November 2025 assessment lifecycle. The Panel records 3 findings on this audience-specific cell. The failure pattern in scope: Source-text condition replacement with an invented overlay test; Key Consideration mis-attribution of a quantitative threshold; and Supervisory-timeline truncation, dropping the validation phase. Questions are prepared by the RLB Specialist Panel based on real practical AI usage in the workflows the respective audience uses AI for.

The Panel binds each AI finding to verbatim regulator-issued source text held as primary substrate.

For PI Compliance teams the operational consequence is direct. A regulatory-change register that records the CPMI-IOSCO Level 3 assessment as a 2023-2024 exercise, that attributes the six-month LNAFE floor to KC2, and that imports a non-existent Basel/CRD liquidity overlay into Principle 15 readiness scoping carries three independent factual inaccuracies, any one of which is recoverable on a routine regulator query.

PFMI Principle 15 is one of the cleanest primary-source surfaces in the cross-border CCP and CSD universe: a Key Consideration cited in a deliverable is either the right KC or it is not; a quantitative floor is either the regulator's text or it is not; an assessment-period date range is either accurate or it is not. Each is recoverable on a routine line-by-line read.

The audit's 3 findings for this cell carry immutable RLB Citation IDs and are bound to verbatim regulator-issued source text held by the RLB Specialist Panel: RLB-H-INT-BIS-CPMI-IOSCO-PFMI-L3-GENERAL-BUSINESS-RISK-2025-Q002-Opus47, RLB-H-INT-BIS-CPMI-IOSCO-PFMI-L3-GENERAL-BUSINESS-RISK-2025-Q003-Sonnet46, RLB-H-INT-BIS-CPMI-IOSCO-PFMI-L3-GENERAL-BUSINESS-RISK-2025-Q005-Sonnet46. The full audit on the November 2025 CPMI-IOSCO Level 3 assessment is published at the PFMI Level 3 General Business Risk hub on RegLegBrief.com.

This is the consolidated view of findings. Click the Citation IDs or 'see details →' on any item for the full details for each finding.

  1. KC3 Basel equity carve-out qualifier mischaracterised or denied
    RLB-F-INT-BIS-CPMI-IOSCO-PFMI-L3-GENERAL-BUSINESS-RISK-2025-Q002

    A Compliance team that asks AI tools about the Basel equity carve-out in PFMI Principle 15 KC3 may receive either a fabricated KC4 liquidity test grafted onto KC3's qualifying condition, or a flat denial that the carve-out exists at all, both positions contradict the KC3 verbatim text. Either version, embedded in a PFMI-readiness policy or a capital adequacy framework, misstates the condition under which Basel-standard equity counts toward an FMI's LNAFE requirement.

    A Payment Institution that applies the fabricated KC4 liquidity test may over-restrict eligible equity; one that accepts the denial of any carve-out has a policy that diverges from the published standard on its face. When a primary supervisor reviews the GBR capital framework and identifies the mischaracterisation, the firm faces a formal deficiency finding and directed remediation, alongside the reputational signal that the policy was not verified against primary sources.

    see details →
  2. Six-month LNAFE floor misattributed to KC2
    RLB-F-INT-BIS-CPMI-IOSCO-PFMI-L3-GENERAL-BUSINESS-RISK-2025-Q003

    AI tools that place the six-month LNAFE floor in KC2, rather than KC3, produce a capital policy that discusses the quantitative minimum in the wrong conceptual context, treating it as part of the scenario-analysis sizing exercise rather than as a separate standalone floor. A Compliance drafter relying on this characterisation produces documentation that misrepresents the KC structure in any regulatory submission or internal audit deliverable. This finding also involved a secondary source being cited as supporting the AI's incorrect position, which makes the error harder to catch in internal review: the drafter believes the characterisation is externally corroborated.

    CPMI-IOSCO or a national supervisor reviewing the framework would identify immediately that KC3's floor is being attributed to the wrong provision.

    see details →
  3. Level 3 assessment lifecycle understated by one year
    RLB-F-INT-BIS-CPMI-IOSCO-PFMI-L3-GENERAL-BUSINESS-RISK-2025-Q005

    AI tools tasked with summarising the November 2025 CPMI-IOSCO Level 3 assessment process produced a timeline ending in 2024, dropping the further engagement rounds and findings-sharing phase that ran through April 2025. A Compliance team at a trade repository or payment institution that incorporates this summary into a regulatory engagement methodology note has produced a document that misrepresents how CPMI-IOSCO validated findings with FMIs, specifically, it omits the final year of the assessment lifecycle, understates the recency of the conclusions, and mischaracterises the process CPMI-IOSCO used before publication.

    In a direct regulator meeting, a supervisor who is familiar with the assessment, or who pulls the BIS publication, would identify the error immediately, creating a credibility problem that no subsequent clarification fully resolves.

    see details →

Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.