# A practical control checklist before an AI agent moves money > Source: > Published: 2026-07-31 20:14:23+00:00 AI agents are getting better at taking action. Moving money deserves a higher bar. A model can suggest a payment. It should not be the only thing deciding whether that payment happens. The final decision should come from clear rules that people can inspect, test, and change. Here is the checklist I would want before any agent initiated transaction reaches a payment provider. Bind each request to a specific agent, organization, human owner, and credential. A shared token makes later investigation much harder. Define allowed merchants, currencies, countries, payment types, and time windows. Permission to pay one cloud vendor should not become general permission to send money anywhere. A payment below a single transaction limit can still be risky when repeated. Check the individual amount, daily total, number of attempts, and unusual velocity. A new merchant, destination, device, or unusually large amount should pause execution and ask a person. The approval should be tied to the exact payment details so a later change cannot reuse it. The model can propose an action without seeing a raw payment secret. A separate trusted service should hold credentials and execute only after every rule passes. An audit record should show the request, policy version, checks, outcome, approval, and payment result. It should avoid storing sensitive prompts or data that are not needed for accountability. When a payment is blocked, return a clear reason and a safe next step. The agent should not keep trying small variations until something slips through. Try prompt injection, changed merchant details, duplicate requests, stale approvals, revoked access, rate bursts, and payment provider errors. These failures are easier to fix before funds can move. The pattern is straightforward: I am part of the team building Credian around this problem. Our sandbox is still under construction, and we are learning from people who build agent systems, security controls, and payment infrastructure. Which control would you consider nonnegotiable before an AI agent can move money? If you would be open to being one of our future beta users when it drops, you can join the waitlist at [https://credian.io/?utm_source=dev&utm_medium=organic&utm_campaign=agent_payment_controls_checklist](https://credian.io/?utm_source=dev&utm_medium=organic&utm_campaign=agent_payment_controls_checklist)