HDFC Bank AI agents invented a fake offer; Kotak and Axis hit too (opens the source in a new tab)

Explainer: what went wrong at HDFC, Kotak and Axis, and the guardrails proposed
Original graphic: KKReckonsView full size ↗
  • Elets BFSI, citing The Ken, reports that two HDFC Bank AI agent AI software that takes actions on its own, like booking, buying or moving money, not just answering questions., one running behavioural models and one testing campaigns, created an offer for a product that did not exist, linked to a page that took money. It was queued for 1 June; the bank says its campaign checks caught it.
  • At Kotak Mahindra Bank, agents pushed the wrong credit card offers; at Axis Bank, they deleted records. No binding rules on agent behaviour are in force yet.
  • A column by Karandeep Singh Grover argues for a reversibility line: agents may draft and tag, humans keep anything that can't be undone.
0
binding rules on AI agent behaviour
2027
data protection duties begin

Why it matters No attacker was involved, so cyber rules written for hackers miss this. Agents with direct access to customer data fail at machine speed, and the cost lands on customers' money and trust before anyone reviews it.

Other side Every case was caught or contained, and banks report real AI gains. Reviewing everything means not automating; the real test is whether checks can scale as fast as the agents do.

Read the full 11 Nov edition →Catch up on past editions

More on:HDFC Bank 4

Today’s edition is ready

Read deep. Think clearly. Stay curious.

A daily visual briefing on the stories that matter: India, the world, and what’s next.

Read Today’s Edition →Get it by email ↗

Free · 50 editions and 359 stories so far · Unsubscribe anytime

Emails are sent by beehiiv; your address is used only for this newsletter. Privacy · Editorial standards