Your AI Agent Just Paid a Sanctioned Russian Bank. Nobody Stopped It.

Stripe launched Machine Payments Protocol in March 2026. AI agents can now make autonomous payments. But here's what nobody built: AML screening for agents. When a human pays someone, the bank checks sanctions lists. When an AI agent pays someone -- nothing. The agent has an API key and it pays whoever it wants. No KYC. No sanctions check. No Travel Rule. We just changed that. The Problem An AI procurement agent operating for a UK company is authorised to buy cloud services. It has a $5,000/day spending limit. It's trusted. Today, nothing stops that agent from: Paying a sanctioned Russian bank Transferring funds to an entity on the OFAC SDN list Making payments to recipients in Iran, North Korea, or Syria Structuring transactions to avoid reporting thresholds The agent's API key works everywhere. Sanctions are meaningless to a machine that doesn't check them. What We Built AgentPass now screens every agent payment against 75,784 live sanctions entries in real time: UK HMT Sanctions Lis