UK AI Governance Crisis: The $579B Fraud Risk No One’s Fixing

UK financial services are sitting on a systemic risk time bomb. While global fraud losses hit a staggering $579 billion in 2025, the sector lacks a shared standard for AI governance that could help prevent AI-enabled attacks, which 90% of financial professionals now report are increasing.

The Governance Gap

Research from Zango AI, based on interviews with 27 C-suite and senior executives from institutions including Santander, Stripe, Standard Chartered, Lloyds Banking Group, Monzo, and Revolut, reveals a critical mismatch: business and technology teams are deploying AI tools faster than risk and compliance functions can track them.

“Some institutions cannot identify all the AI systems in use across their organisations,” the report warns. This creates a widening oversight gap as AI shifts from predictable outputs to generative and agentic models with context-dependent results that cannot be fully validated in advance.

Why the UK Lags Behind

While the US Treasury led the creation of the Financial Services AI Risk Management Framework (FS AI RMF) with 108 financial institutions and NIST, and Singapore’s MAS issued equivalent guidance, no comparable standard exists in the UK or EU.

This absence forces firms to tackle similar governance challenges independently, resulting in inconsistent controls that criminals can exploit at scale. Global fraud losses aren’t just statistics—they represent real vulnerability in the financial system.

The Solution: Industry-Led Standards

Zango’s research proposes a practitioner-built, sector-specific implementation model inspired by the Joint Money Laundering Steering Group—an industry-developed standard that carries government endorsement without being formally mandated.

As Lord Clement-Jones notes in the report’s foreword: “We cannot simply wait for the aftermath of the first major AI-fuelled financial scandal to force us into action.”

Actionable Insights for Finance Professionals

For UK financial institutions, the path forward involves:

• Participating in industry efforts to develop shared AI governance standards
• Mapping AI use cases to existing regulatory frameworks (SM&CR, Consumer Duty, Operational Resilience)
• Investing in AI literacy and training for compliance, risk, and legal teams
• Implementing basic controls: AI inventory management, model risk assessment, and third-party oversight

The £579 billion question isn’t just about whether AI will transform finance—it’s about whether the sector can govern that transformation before crisis strikes.