Legal teams at Payment Institutions advising on the CPMI Harmonised ISO 20022 Data Requirements (Updated Report) are increasingly using AI to draft regulatory mapping documents on payment-system standards, generate counterparty submissions referencing governance pedigree, and prepare board briefings on CPMI workstreams. The same tools validate institutional attribution in cross-border filings.
Two frontier AI models tested by the RLB Specialist Panel on the workflows payment-institution legal teams use to support advice on the CPMI Harmonised ISO 20022 Data Requirements (Updated Report) produced one discrete hallucination bound to regulator-issued source text. The Panel records a single recurring failure class: Source-Credit Fabrication across the set. Questions were prepared by the Specialist Panel based on real practical AI usage in the workflows payment-institution legal teams use AI for, and each finding is bound to verbatim regulator-issued source text held as primary substrate.
For Legal teams at Payment Institutions, each hallucination has a direct operational consequence in the regulatory mapping document, board briefing, or counterparty submission. The Panel's testing surfaces CPMI working-group chair misattribution. Where these errors flow into a deliverable, the exposure is a competent-authority filing that misidentifies the standard's institutional author, formal corrections across multiple corridors, and a credibility hit with regulators and correspondents.
The pattern is uniform across the set: the AI returns a confident, sourced-looking answer that conflicts in a load-bearing specific with the regulator's verbatim text, and the error survives a first-pass review precisely because the surface form is plausible. The Panel records each hallucination with the regulator's primary substrate held as the anchor, so the corrective text is available alongside the failure.
The Specialist Panel records the citation IDs as follows: RLB-H-INT-BIS-CPMI-ISO-20022-HARMONISATION-UPDATED-2026-Q004-Sonnet46 (Claude Sonnet 4.6 (web search on), Source-Credit Fabrication). Each citation links to the verbatim regulator-issued source text, the tested AI question, and the recorded AI response, so the Panel's assessment is traceable end to end. For legal teams at payment institutions, the citation IDs operate as a reference index: when an AI answer in the working draft matches a known Panel finding, the cited regulator text is already available as the corrective anchor.
The full per-finding analysis cards, including the audience-specific impact statement, sit on the cell's detail surface for sign-off use.
This is the consolidated view of findings. Click the Citation IDs or 'see details →' on any item for the full details for each finding.
When AI tools are asked which central bank chairs the CPMI working group behind the harmonised ISO 20022 data requirements, tested AI assistants attributed the role to the Federal Reserve Bank of New York and named a fabricated individual as co-lead, when the Reserve Bank of Australia is confirmed chair and Michele Bullock served as former Co-Chair. For a Legal team at a Payment Institutions firm, this error surfaces in regulatory mapping documents, board briefings, and counterparty submissions that reference the governance pedigree of the harmonised requirements.
A document filed with a competent authority or shared with a correspondent banking partner that misidentifies the scheme's institutional author requires formal correction and risks signalling to the regulator or counterparty that the firm's Legal function has not engaged with the primary record. In internationally active Payment Institutions where the same briefing template is adapted across corridors, a single AI-originated misattribution can propagate simultaneously into multiple markets before discovery, compounding the remediation burden across jurisdictions.
Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.