Promoting the Harmonisation of Application Programming Interfaces to Enhance Cross-Border Payments: Recommendations and Toolkit
Bank for International Settlements — Committee on Payments and Market Infrastructures (CPMI) (BIS-CPMI)
Research Complete
Hallucination findings published
AI Labs white paper available
Rich-narrative analysis of how AI models fail on this regulation, written for
AI model providers. Includes per-finding context and remediation framing.
When both Claude Opus 4.7 with web search and Claude Sonnet 4.6 with web search encounter content locked inside an inaccessible PDF — the CPMI October 2024 report on harmonising APIs for cross-border payments — they do not refuse: they fabricate. Sonnet 4.6 produced a...
Read white paper →
Hallucination Shape
(8 Response Hallucination + 33 Citation Hallucination = 41 Hallucination findings)
Citation Hallucination Modes (33 failures)
Fabricated
2
Pretextual
3
Contradictory
28
Hallucination findings
8 finding cards across
2 AI Models —
covering 8 Response Hallucinations +
33 Citation Hallucinations
(41 hallucination failures total).
Each card pairs the AI's answer against the authenticated regulator-text excerpt that contradicts it, and flags every AI-cited source as Fabricated / Pretextual / Contradictory.
A payments operations manager asks what the CPMI October 2024 API harmonisation report's self-assessment toolkit contains—what areas it covers, how it is structured, what assessment dimensions or criteria it uses, and how a bank team should use it to evaluate API harmonisation readiness.
Claude Opus 4.7 (web search on) answered
the toolkit is organised as a self-assessment workbook keyed recommendation-by-recommendation, intended for use both by operators of payment systems and by participants/users (banks). I am NOT in a position to verify from memory the exact number of assessment questions
Regulator text says
Landing page d224: 'accompanied by a toolkit for stakeholder self-assessment' and 'practical implementation actions for each recommendation.' PDF not extractable. No third-party source describes toolkit contents.
An advisor to a South African financial institution needs to know which central banks are actively involved in piloting or implementing specific API harmonisation recommendations, and whether any central bank is specifically named as partnering with CPMI on the payment pre-validation API recommendation.
Claude Opus 4.7 (web search on) answered
it is plausible that SARB is engaged with the d224 implementation track, but I cannot point to a public CPMI statement naming SARB as the specific partner on the pre-validation API recommendation.
Regulator text says
CPMI Brief No. 9 (Nov 2025): 'The CPMI, in collaboration with the South African Reserve Bank (SARB), has been advancing the API recommendation on payment pre-validation by conducting interviews with market stakeholders.'
A compliance analyst asks which of the 10 CPMI API harmonisation recommendations specifically target commercial banks or correspondent banking institutions, which target payment system operators, which target central banks or regulators, and which target standards bodies—seeking a recommendation-by-recommendation stakeholder breakdown.
Claude Opus 4.7 (web search on) answered
(i) FACILITATIVE / GLOBAL HARMONISATION PROCESSES — primarily targeted at API standards-setting bodies (ISO, BIAN, Swift, regional/sectoral bodies), CPMI itself, and public authorities coordinating global governance; secondarily at payment-system operators that adopt those standards. Not specifically at correspondent banks.
Regulator text says
Official text: '10 recommendations directed at a broad array of stakeholders.' Individual stakeholder targeting per recommendation is in the inaccessible PDF.
A market briefing on the global fast payment system landscape needs CPMI data on how many domestic fast payment systems are currently operational globally, how many have already enabled cross-border payment exchanges, how many are planning cross-border linkages, and what proportion are operated by central banks versus private entities.
Claude Opus 4.7 (web search on) answered
the 2025 monitoring survey covers 57 fast payment systems (56 for one of the graph cuts), up from prior surveys; this is the most recent CPMI count
Regulator text says
Speech sp231115 (Nov 2023, Tara Rice): '70+ domestic fast payment systems currently operational globally'; '14 fast payment systems already enabling cross-border exchanges'; '24 systems planning linkages within five years'; '40% operated by central banks; 35% by private entities'
A payments operations manager asked what the CPMI d224 self-assessment toolkit contains — its areas, structure, and assessment criteria. The response fabricated a detailed four-area structure with specific assessment dimensions and a usage process, falsely asserting the structure was drawn from public summaries when no public source describes the toolkit's internal contents.
Claude Sonnet 4.6 (web search on) answered
Area 1 — Harmonisation Governance and Processes... Area 2 — API Design Principles and Data Standards... Area 3 — Developer Experience... Area 4 — Pre-Validation APIs... The description above reflects what is confirmed from public summaries of d224's structure.
Regulator text says
Landing page d224: 'accompanied by a toolkit for stakeholder self-assessment' and 'practical implementation actions for each recommendation.' PDF not extractable. No third-party source describes toolkit contents.
An advisor was asked which central bank CPMI had specifically named as its partner for advancing the payment pre-validation API recommendation under d224. The AI responded that no central bank had been publicly identified in this role and proposed the Bank of England as the closest named involvement — when CPMI Brief No. 9 explicitly names the South African Reserve Bank (SARB) as CPMI's named collaboration partner conducting joint stakeholder interviews on the pre-validation API recommendation.
Claude Sonnet 4.6 (web search on) answered
Based on my research, no single central bank is publicly identified in CPMI documents as formally 'partnering' with CPMI on the payment pre-validation API recommendation in a named bilateral arrangement... The Bank of England's involvement is the closest to a named partnership
Regulator text says
CPMI Brief No. 9 (Nov 2025): 'The CPMI, in collaboration with the South African Reserve Bank (SARB), has been advancing the API recommendation on payment pre-validation by conducting interviews with market stakeholders.'
A technology architect asked what specific changes the updated CPMI ISO 20022 data requirements document (d230) made relative to the 2023 original. The response incorrectly stated d230 was published April 2026 (actual: February 2026) and fabricated specific data entity breakdowns for the technical annex, with the date error self-retracted when the AI was challenged to verify its sources.
Claude Sonnet 4.6 (web search on) answered
d230 — 'Harmonised ISO 20022 data requirements — updated report' — published April 2026, joint CPMI-PMPG publication.
Regulator text says
d230 (Feb 2026): 'Updated version incorporates standardisation and regulatory developments since 2023, clarifications addressing market participant questions, and updated/expanded data model in a separate technical annex.'
A market briefing on the global fast payment system landscape was asked to include the proportion of fast payment systems operated by central banks versus private entities. The response correctly cited the 70+ global systems, 14 already cross-border, and 24 planning links — but falsely stated the ownership breakdown was not available in public CPMI sources, when the November 2023 CPMI speech by Tara Rice explicitly gives 40% central bank-operated and 35% privately operated.
Claude Sonnet 4.6 (web search on) answered
A precise percentage breakdown of central bank vs. privately operated FPS is not enumerated in the public Brief 10 summaries available.
Regulator text says
Speech sp231115 (Nov 2023, Tara Rice): '70+ domestic fast payment systems currently operational globally'; '14 fast payment systems already enabling cross-border exchanges'; '24 systems planning linkages within five years'; '40% operated by central banks; 35% by private entities'
Affected audiences
These findings affect the following audiences. Click through for the case studies that aggregate findings across all regulations in this jurisdiction.
Practitioners
Sectors × Departments