AI Governance Gap in Financial Services
Senior leaders across the financial sector warn that the United Kingdom faces a critical AI governance gap, exposing the industry to systemic risk. A new Zango AI report highlights the urgent need for operational guidance and shared standards.
Key Findings
The report, based on interviews with 27 C‑suite executives and roundtables with 60 senior practitioners, identifies several alarming trends:
- Shift in AI systems: Institutions are moving from predictable tools to generative and agentic models that produce context‑dependent outputs, making pre‑deployment validation difficult.
- Oversight lag: Business and technology teams deploy AI faster than risk and compliance functions can monitor, leading to undiscovered tools within organisations.
- Criminal exploitation: Global fraud losses reached $579 billion in 2025, with 90 % of financial professionals reporting an increase in AI‑enabled attacks.
Regulatory Landscape
The UK lacks a practical AI risk management framework comparable to the United States’ February 2026 Financial Services AI Risk Management Framework and Singapore’s March 2026 standard. Without such guidance, firms develop fragmented solutions, creating inconsistent control standards and widening oversight gaps.
Calls for a Unified Standard
Report authors urge the creation of a sector‑specific implementation guide, modelled after the Joint Money Laundering Steering Group framework, which enjoys government endorsement without being mandated. This would provide a consistent basis for governing AI across the industry.
Industry Voices
Ritesh Singhania, CEO of Zango, notes that compliance teams are struggling to keep pace with rapidly deployed AI, while criminal networks scale even faster, creating systemic vulnerability.
Dean Nash, adviser to Zango and Global COO (Legal) at Santander, highlights that modern AI systems differ fundamentally from legacy models, posing significant accountability challenges without a shared standard.
Implications for the Future
Without coordinated operational guidance, UK financial institutions risk fragmented governance, increased exposure to AI‑enabled fraud, and potential regulatory scrutiny. Establishing a unified, practitioner‑built framework is essential to safeguard the sector’s stability and integrity.
