Ask a room full of bank executives where AI is safe to experiment and run without human intervention, and you’re likely to hear them answer by department. Marketing, of course. Lending, definitely not. It’s a reasonable enough rule on the surface, but stops being so iron-clad the moment you peel back the layers to see what’s happening inside each department.

Content and Marketing

A marketing agent that drafts the bank’s blog posts or schedules the month’s social content within the approved guidelines is fairly low risk. If something goes wrong, someone is likely to catch it before it’s published. If they don't, the cost of being wrong is usually a simple re-write.

When the same agent is auto-sending emails to your full customer or prospect lists, without a human reviewing it first, is a different beast. It’s the same department, the same tool, but a vastly different risk profile, because the blast radius changed. One mistake here and now damage control becomes far more complex.

This is how scoping agentic work must be done, and exactly how Grandir handles access at Linker Finance. A relationship banker sees only what they need, marketing sees what marketing needs, and nothing further. The line is drawn by what the task in front of the agent requires and which steps of the task need additional oversight.

Fraud and Onboarding

An agent built for the fraud department can flag transactions, pull relevant account activity or other history, and share a concise summary with a human analyst. This is useful work without much downside, akin to a fresh college-grad doing entry-level analysis. When the information is wrong, the senior analyst can clear or correct it and move on.

When the agent can go on to close the account or freeze access without intervention, that becomes a different story. The action just became much harder to reverse quickly, and a customer unable to access their funds over a false positive is beyond just a minor inconvenience. While the task of ‘fraud agent’ may look similar on the surface, investigating a flag, one path leads to a recommendation whereas the other leads to a rather unhappy customer.

Onboarding follow-ups, on the other hand, sits closer to the low-risk side of the scale. An agent made to nudge incomplete applications or serve as a Q&A for routine document questions is easier to loosen the reins on. When you flip the coin and your onboarding agent begins approving funding thresholds or independently waives a requirement, those reins need to be held much tighter.

Lending-Adjacent Work

Lending and credit related work is where banks are consistently the most cautious, and for good reason. However, even in this area, the split continues to be assembly versus decision making.

The loan department’s agent made to pull files together, calculate ratios, or flag applications for things that might fall outside of bank policy saves precious human time. A human will still review the file and decide what the nuanced next steps should be. That’s meaningfully different from the agent making credit decisions without human oversight, where a mistake can lead to costly decisions hitting the record without anyone noticing.

Both of these are in the same general category of work, with the word “lending” loosely attached, but with vastly different consequences if there are incorrect decisions made.

The Consistent Pattern Underneath All Three

Each of the above examples break in the same way. The risk isn’t necessarily tied to the department, rather whether a mistake can be caught before it costs something, and how many people or dollars it impacts if it isn’t.

It comes down to the same governed versus ungoverned question we touched on last week. Governance should be more than a policy the bank sets once for the department and forgets about until the next update. In the agentic AI world, it is now a question asked at each task level, every time a new use case comes up: if this is wrong, can someone catch it before it matters, and how far might it reach if they don’t.

Ask that same room of executives again, task by task where AI is safe to run, and you’ll get a more thoughtful answer. Many just haven’t been asked to dig in that closely yet.

AI to Expand Relationships (Grandir)

Growing existing relationships works the same way. An agent reviews account activity and flags the opportunity, whether it’s a business that’s outgrown its existing checking account or a high-earning household sitting on a large idle balance, and gives a banker something to work with before they make a call. When you let that same agent decide the appropriate offer and send it to the customer, with no banker in the loop, the risk profile changes. This is our logic behind Linker 360 and Grandir, Linker’s customer and financial intelligence tools. The agent surfaces the opportunity, but the banker still owns the call.

If your bank is working through where agentic AI belongs, and where it still needs a human, that’s the same scoping work we’re working through with banks as we launch Linker 360 and Grandir. We’re happy to include yours too.

Let's Partner and grow Together