US Codex
Bill
Notes

H.R. 8671 — what changed

Bank Fraud Technology Advancement Act of 2026

From Introduced in House to Reported in House. 3 sections amended between Introduced in House and Reported in House.

Sec. 2 Definitions

In this Act:

(1)
changed Advanced fraud detection technology— The term advanced “advanced fraud detection technology includes technology” means emerging technologies used to detect, prevent, or mitigate financial fraud and scams, including artificial intelligence, machine learning, predictive analytics, behavioral biometrics, network analytics, data fusion tools, distributed ledger-based monitoring tools, and blockchain tracing tools, and other emerging technologies used to detect, prevent, or mitigate financial fraud.tools.
(2)
Artificial intelligence— The term “artificial intelligence” has the meaning given that term in section 5002 of the National Artificial Intelligence Initiative Act of 2020 (15 U.S.C. 9401).
(3)
changed Credit union— The term “credit union” means a State credit union or Federal has the meaning given the term “insured credit union, as such terms are defined, respectively, union” in section 101 of the Federal Credit Union Act (12 U.S.C. 1752).
(4)
Federal banking agency— The term Federal banking agency—
(A)
has the meaning given such term in section 3 of the Federal Deposit Insurance Act (12 U.S.C. 1813); and
(B)
means the National Credit Union Administration.
(5)
Insured depository institution— The term “insured depository institution” has the meaning given such term in section 3 of the Federal Deposit Insurance Act (12 U.S.C. 1813).
(6)
Machine learning— The term “machine learning” has the meaning given that term in section 5002 of the National Artificial Intelligence Initiative Act of 2020 (15 U.S.C. 9401).

Sec. 3 Study on advanced technologies in fraud and scam detection and prevention

(a)
changed In general— The Federal banking agencies, in consultation with the Secretary of the Treasury, the Financial Crimes Enforcement Network, the Federal Trade Commission, the Bureau of Consumer Financial Protection, the Federal Communications Commission, and other appropriate Federal and State government agencies, including appropriate law enforcement agencies, shall jointly conduct a comprehensive study on the use of advanced fraud detection technology by insured depository institutions and credit unions.
(b)
Required elements— The study required under subsection (a) shall evaluate the following:
(1)
changed Current use and effectiveness— The current use and effectiveness of advanced fraud detection technology, including—technologies, including–
(A)
the extent to which insured depository institutions and credit unions of varying asset sizes deploy advanced fraud detection technology;
(B)
changed measurable outcomes relating to fraud detection, prevention, loss reduction, loss mitigation, privacy, and consumer protection; andprotection;
(C)
changed barriers to adoption, including cost, interoperability constraints, regulatory uncertainty, adoption and considerations of interoperability, data access limitations, access, liability, error rates, and liability concerns.regulation; and
(D)
added how various fraud detection technologies differ in use, effectiveness, costs, benefits, and considerations under subparagraphs (A) through (C).
(2)
changed Community financial institution access— Community financial institution (that is either an insured depository institution or credit union) access to advanced fraud detection technology, including—
(A)
changed challenges faced by community financial institutions in accessing or deploying advanced fraud detection tools;tools, including unique challenges faced by various types of community financial institutions;
(B)
changed whether economies of scale disadvantage smaller community financial institutions relative to large community in general, or certain types of smaller financial institutions;
(C)
options to facilitate shared services, utility models, managed-service providers, or consortium-based fraud detection platforms; and
(D)
recommendations to ensure regulatory guidance is appropriately tailored to avoid discouraging adoption by smaller community financial institutions.
(3)
Artificial intelligence and machine learning— Artificial intelligence and machine learning, including—
(A)
changed the use by insured depository institutions and credit unions of artificial intelligence and machine learning models, applications, and tools in detecting fraud patterns, anomalies, synthetic identity fraud, and real-time payment fraud;
(B)
governance frameworks used by insured depository institutions and credit unions to manage fraud model risk, explainability, and validation; and
(C)
changed interactions between fraud detection models steps Federal banking agencies can take in coordination with other relevant government agencies and consumer protection laws.the private sector to ensure access by insured depository institutions and credit unions, including community financial institutions and their third-party vendors, to such models, applications, and tools.
(4)
Information sharing and public-private partnerships— Information sharing and public-private partnerships, including—
(A)
the effectiveness of existing information-sharing frameworks;
(B)
whether expanded public-private partnerships or centralized fraud utilities would enhance detection capabilities;
(C)
the feasibility of a voluntary fraud analytics consortium accessible to community financial institutions; and
(D)
privacy, data protection, and cybersecurity considerations associated with expanded data sharing.
(5)
Payments system risks— Payments system risk, including—
(A)
fraud risks associated with electronic funds transfers and checks; and
(B)
whether advanced analytics can reduce fraud while preserving settlement finality and payment system stability.
(6)
Regulatory and supervisory considerations— Regulatory and supervisory considerations, including—
(A)
changed what benefits and risks arise from existing supervisory expectations with respect to innovations in fraud detection and prevention, including whether existing supervisory expectations create barriers to innovation;innovation while maintaining relevant safeguards;
(B)
changed the need for interagency guidance, regulatory clarity, or safe harbors to support technology adoption;adoption in a manner that promotes fraud detection and prevention consistent with consumer protection, privacy, safety and soundness, and national security;
(C)
opportunities to harmonize expectations across Federal banking agencies; and
(D)
whether additional training for Federal banking agencies staff is necessary to promote effective regulation and supervision of financial institutions’ use of advanced fraud detection technology, especially for community financial institutions.
(c)
Report and recommendations—
(1)
changed Report— Not later than 18 months after the date of enactment of this Act, the Federal banking agencies shall issue a report to the Committee on Financial Services of the House of Representatives and the Committee on Banking, Housing, and Urban Affairs of the Senate containing all findings and determinations made in carrying out the study required under this section, and make such report publicly available, except for classified or supervisory information.available.
(2)
changed Recommendations—Classified annex— The A report required under paragraph (1) shall include legislative, regulatory, or supervisory recommendations which may include—include a classified annex, if applicable, provided to the committees.
(3)
added Recommendations— The report required under paragraph (1) shall include legislative, regulatory, or supervisory recommendations that promote fraud detection and prevention consistent with consumer protection, safety and soundness, and national security, which may include—
(A)
renumbered was (4)(3)(3) proposals to support shared fraud detection utilities or consortium-based analytics platforms;
(B)
added guidance or safe harbors to encourage artificial intelligence use in fraud prevention;
(B)
removed guidance or safe harbors to encourage responsible artificial intelligence use in fraud prevention;
(C)
renumbered was (4)(3)(5) pilot programs tailored to community financial institutions; and
(D)
renumbered was (4)(3)(6) recommendations to strengthen public-private information sharing consistent with privacy and civil liberties protections.

Sec. 4 Community Financial Institution Fraud Technology Pilot Program

(a)
changed In general— Not later than 1 year after submission of the study report required under section 3, 3(c), the Federal banking agencies may jointly establish a voluntary pilot program to facilitate community financial institution access for insured depository institutions and credit unions with less than $10,000,000,000 in total consolidated assets to advanced fraud detection tools.
(b)
Program features— The pilot program described in subsection (a) may include—
(1)
pooled procurement or shared services models;
(2)
model validation assistance or technical support;
(3)
standardized vendor risk management templates;
(4)
regulatory clarity regarding model governance expectations; and
(5)
collaboration with the Department of the Treasury and law enforcement to provide anonymized fraud typology data feeds.
(c)
added Sunset and report—
(1)
added Sunset— Any pilot program established under this section shall expire not later than 3 years after submission of the report required under section 3(c).
(2)
added Report— Not later than 6 months after the expiration of all pilot programs established under this section, the Federal banking agencies shall issue a report to the Committee on Financial Services of the House of Representatives and the Committee on Banking, Housing, and Urban Affairs of the Senate, and make such report available to the public, containing—
(A)
added all findings and determinations made by the Federal banking agencies in carrying out any pilot program established under this section; and
(B)
added any legislative, regulatory, or other recommendations the Federal banking agencies may have based on such findings and determinations.
(3)
added Classified annex— A report under paragraph (2) may include a classified annex, if applicable, provided to the committees.