Summary of Key Points
AI-powered payment services (where AI evolves from being a “chatbot” to helping users make payments) are rapidly being implemented, but the industry faces challenges such as unclear responsibilities, lack of consensus on risk management, and inadequate data protection standards. The China Payment and Clearing Association has issued the “Self-Regulatory Convention for AI-Powered Payment Applications,” which outlines rules for AI management, user authorization, and risk control. Licensed institutions are required to handle core business operations, and self-service payment scenarios must be reported in advance to guide innovation within a secure framework. Currently, AI-powered payment services are still in the initial phase of assisting users with payments, with fully autonomous payment systems not yet widely adopted.
Why was this convention established?
AI-powered payment services have become popular, but they also bring potential risks. For example, who is responsible for errors in payment processes (users, AI developers, or payment providers)? There are concerns about AI being used for money laundering, fraud, and data breaches. The convention aims to set clear boundaries to prevent financial and compliance risks associated with unregulated practices.
What does the convention cover?
The convention establishes a comprehensive framework focusing on both security and development. The main rules include:
1. Transparent identity for AI entities: AI must be properly identified, including the developer and any associated risks.
2. Clear authorization boundaries: Users must specify what the AI can do (e.g., only pay for utilities) and agree to the terms and conditions. AI must obtain user consent before making payments (e.g., through facial recognition or password entry).
3. Multi-layered risk prevention: Transactions are categorized, with stricter controls for larger amounts; technical security measures must protect AI algorithms, networks, and data from attacks.
4. Clear accountability: Licensed institutions responsible for core services (account management, transaction processing, and settlement) must ensure the safety of users’ funds and information.
Who is eligible to provide AI-powered payment services?
Only licensed institutions are authorized to offer these services. Core operations, such as account management, transaction processing, and fund settlement, can be conducted by banks, non-bank payment providers (like Alipay and WeChat Pay), or clearing organizations like UnionPay. Unlicensed entities are not allowed to handle these critical aspects.
What is the current state of AI-powered payment services?
Most applications are still at the initial stage of assisting users with payments. Experts have identified three phases of development:
1. Assisted payment: AI helps users fill out forms and initiate payments, with final confirmation required by the user.
2. Pre-set condition-based payment: Users set rules (e.g., automatically paying a monthly phone bill), and AI executes the payment on schedule.
3. Universal condition-based payment: AI makes autonomous decisions based on user behavior (e.g., automatically topping up a fuel card when low fuel is detected).
What are the requirements for advanced AI-powered payment services?
If organizations want to offer more advanced services, they must follow these steps:
1. Apply for authorization: Submit a request to the China Payment and Clearing Association.
2. Undergo evaluation: The application will be assessed for its usefulness, technical security, and compliance with ethical guidelines (e.g., preventing unnecessary spending).
3. Implement safeguards: Ensure there is human customer service to handle issues, real-time risk monitoring, and mechanisms to correct errors (e.g., refunding payments or reversing incorrect actions).
In summary, the convention provides a safety net for AI-powered payment services, encouraging innovation while preventing uncontrollable risks, thus creating a conducive environment for users and the industry to thrive.