AI Hallucination ResearchFindings by audienceSectorsInternational / MultilateralRetail BankingLegal › Promoting the Harmonisation of Application Programming Interfaces to Enhance Cross-Border Payments: Recommendations and Toolkit
Retail Banking × Legal — International / Multilateral · Last updated 11 Jun 2026 · methodology v2.3 · Hallucination Register
Share / Print X LinkedIn Email

AI Hallucination on Promoting the Harmonisation of Application Programming Interfaces to Enhance Cross-Border Payments: Recommendations and Toolkit for Legal teams at Retail Banking firms in international jurisdictions

Retail Banking Legal teams: documentation and reporting gaps possible from AI reading of CPMI Cross-Border API Harmonisation 2024

In-house legal counsel at retail banks supporting cross-border consumer payments on the CPMI API harmonisation programme are increasingly using AI to draft legal memos on consumer-disclosure language for the 10 CPMI recommendations, prepare board-paper legal annexes on the SARB pre-validation workstream, generate scoping documents for new correspondent counterparties, validate ISO 20022 structured-address commitments against regulator text, and produce regulatory horizon-scan summaries. The RLB Specialist Panel tested how that AI usage performs against the regulator's own primary text on CPMI's October 2024 d224 report and the related CPMI Brief and speech series.

The audit surfaced four substantive failure modes that the AI subjects delivered with regulator-fluent confidence.

Source-Credit Fabrication and Stakeholder Taxonomy Fabrication on CPMI API Harmonisation for Cross-Border Payments. Two frontier AI models tested by the RLB Specialist Panel returned confident, citable answers across the panel's CPMI substrate-bound question set on the October 2024 d224 report and the related CPMI Brief and speech series. The panel binds each AI finding to verbatim regulator-issued source text held as primary substrate.

Across the 2 findings in this Legal teams at Retail Banking firms briefing, the AI subjects downgraded a regulator-stated named partnership to a speculative hedge; built a recommendation-by-recommendation stakeholder breakdown from category names rather than the regulator's actual recommendation text.

A legal opinion that hedges the SARB pre-validation partnership as 'plausible but unverified' embeds a verifiable factual error in a partner-signed deliverable. A scoping document built on AI per-recommendation stakeholder taxonomy carries fabricated assignments into the firm's contract pipeline. A regulatory horizon-scan annex that misses the SARB-CPMI workstream positions the firm behind a published regulator-bilateral programme.

The findings are published with immutable RLB Citation IDs: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q007-Opus47, RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q008-Opus47. The full audit is published at the CPMI API Harmonisation for Cross-Border Payments hub on RegLegBrief.com.

Retail-bank in-house counsel reads CPMI material against a narrow set of legal artefacts: the FPS scheme-membership agreement update, the remittance-partner change-of-law clause, the consumer-disclosure schedule for cross-border products, and the board pack on cross-border roadmap exposure. Two AI failures on this regulation hit those artefacts directly. Opus 4.7 denied the SARB pre-validation partnership documented in CPMI Brief No. 9, and Opus 4.7 returned a per-recommendation stakeholder taxonomy reconstructed from category labels rather than the d224 recommendation text. A legal team that copies either output into a contractual clause assigns obligation the regulator did not assign.

What the AI got wrong, and why it matters here

Both failures sit on the artefacts in-house counsel produces from cold-read CPMI material: a partner-naming denial and a fabricated obligation taxonomy. Neither carries a retrieval-gap signal.

Finding 1: SARB pre-validation partnership denied

Opus 4.7 denied any public CPMI statement names SARB as the pre-validation pilot partner. CPMI Brief No. 9 (November 2025) names SARB outright. Quoted into a scheme-membership update or a remittance-partner change-of-law clause, the denial creates avoidable misalignment with the counterparty's roadmap.

Citation: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q007-Opus47.

Finding 2: Invented per-recommendation stakeholder taxonomy

Opus 4.7 returned a clean stakeholder taxonomy across d224's 10 recommendations, built from category labels rather than the recommendation text. A retail-bank integration-agreement scope schedule drafted off that taxonomy misallocates obligation between the bank and the FPS scheme.

Citation: RLB-H-INT-BIS-CPMI-API-HARMONISATION-CROSS-BORDER-2024-Q008-Opus47.

Counsel touches CPMI material on three artefacts: the FPS scheme-membership agreement, the remittance-partner change-of-law clause, and the board cross-border roadmap brief.

Standing artefact Where the AI risk surfaces Failure mode
FPS scheme-membership agreement Stakeholder-obligation mapping Finding 2
Remittance-partner change-of-law clause Pilot-partner naming Finding 1
Board cross-border roadmap brief Both Both

Aggregate impact on the team

The two failures together corrupt the obligation-mapping that the rest of the legal pack depends on; the integrity cost is borne at counterparty-challenge time.

Risk ImpactCountAffected findings
0
0

What this team should do

Treat AI partner-naming and AI stakeholder-obligation tables as draft material requiring verification against the relevant CPMI brief by number and the d224 recommendation text before they enter a contractual clause.

Detection patterns to add to AI-review

  • Pilot-partner statements must trace to a numbered CPMI brief.
  • Stakeholder taxonomies on d224 must be verified against the recommendation text.

How RLB can help

RLB tracks AI failures on d224 and the CPMI brief series and refreshes the catalogue against live AI subjects on rotation. Retail-bank legal can wire the catalogue into the AI-draft review checkpoint so these two failure shapes are caught before they enter a contractual document.

Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.