Agentic artificial intelligence (AI) capable of orchestrating operations rapidly and autonomously is transforming finance into a contested battlespace.
In March 2025, multiple Western financial institutions detected unusual algorithmic trading events suggesting that adversarial “poisoning” attacks subtly altered data inputs and market signals, distorting model predictions, generating micro-arbitrage opportunities, and undermining confidence in financial risk models. The details remain confidential, but this episode demonstrates how efforts to degrade financial models are now a form of financial warfare.
A single, imperceptible “universal adversarial perturbation” can fool trading models in both white-box and black-box settings. Adversaries do not need to block trades or increase price spreads; instead, they can engineer cognitive friction, forcing Western AI systems to doubt their own models and fall back on slower, higher-latency controls.
Finance is already recognized as a domain for statecraft, represented by the increasing centrality of instruments such as sanctions, asset freezes, and counterproliferation finance. Yet this understanding was developed for a world in which human actors still controlled campaign tempo and financial operations followed largely linear and traceable causal chains. The dawning era of AI-enabled financial operations (as we call them, AIFOs) upends these assumptions.
