Financial Firms Struggle to Detect AI-Spoofed Traffic as Security…

Event summary

79% of financial institutions detected malicious bots spoofing AI assistants in the past year.
Only 45% can detect and mitigate spoofed AI traffic in real time.
61% still rely on client-side JavaScript for bot detection, creating visibility gaps.
95% report increased automated traffic interacting with web properties and APIs.
70% cannot guarantee data privacy compliance without HTTP-level traffic verification.

The big picture

The rapid shift to an AI-native web is exposing limitations in traditional security tools designed for human-driven browser interactions. Financial institutions face growing risks as fraudsters exploit blind spots created by the inability to verify automated traffic at the HTTP level. The challenge is compounded by the need to maintain customer experience while upgrading defenses against sophisticated spoofing techniques.

What we're watching

Security Modernization: How financial institutions will adapt their security stacks to handle browserless AI traffic.
Compliance Risks: Whether regulatory scrutiny will increase as firms struggle with automated traffic verification.
Customer Experience: The balance between security measures and maintaining seamless AI assistant integration for users.