How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
This Act may be cited as the ''Preventing Deep Fake Scams Act''.
Provides the short title of the Act: the Preventing Deep Fake Scams Act.
(1)–(6) Artificial intelligence is being used in new and innovative ways by the financial services sector. (2) Artificial intelligence may provide benefits to banks, credit unions, and banking consumers. (3) Artificial intelligence poses unique threats to the safety and security of customer accounts. (4) Voice banking is offered by many banks for security and convenience reasons. (5) The popularity of social media has made video and audio of potential targets easier to obtain for bad actors. These materials can be exploited to replicate the voices and appearances of other people in pursuit of data theft, identity theft, or fraud. (6) Bad actors could utilize deep fakes, including voice and audio manipulation, to compromise and access the financial accounts of a consumer.
Sets out congressional findings on AI use in financial services, noting potential benefits to banks, credit unions, and consumers, as well as threats from deepfake technology. Highlights that voice banking creates vulnerability to voice and audio manipulation, and that social media makes video and audio of potential targets easier for bad actors to obtain.
(a) 1 There is established a Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a) on Artificial Intelligence in the Financial Services Sector (in this section referred to as the ''Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a)'').
(b) 1 The Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a) shall consist of the following: (1) The Secretary of the Treasury, or a designee, who shall serve as Chair of the Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a). (2) The Comptroller of the Currency, or a designee. (3) The Chairman of the Board of Governors of the Federal Reserve System, or a designee. (4) The Chairperson of the Federal Deposit Insurance Corporation, or a designee. (5) The Director of the Bureau of Consumer Financial Protection, or a designee. (6) The Chairman of the National Credit Union Administration, or a designee. (7) The Director of the Financial Crimes Enforcement Network, or a designee.
(c)(1) 1 Not later than the end of the 1-year period beginning on the date of enactment of this Act, the Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a) shall submit to Congress a report containing the contents described in paragraph (3).
(c)(2)(A)–(B) 1 REQUEST FOR INFORMATION.—Not later than 90 days after the date of enactment of this Act, the Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a) shall solicit public feedback on the report required under paragraph (1). (B) INDUSTRY AND EXPERT STAKEHOLDERS.—In developing the report required under paragraph (1), the Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a) shall seek out and consult with industry and expert stakeholders, including— (i) depository institutions of varying asset sizes; (ii) credit unions of varying asset sizes; (iii) third-party vendors who use artificial intelligence when providing services to depository institutions and credit unions; and (iv) artificial intelligence experts.
(c)(3)(A)–(E) 1 The contents of the report described in this paragraph are as follows: (A) A description of how banks and credit unions proactively protect themselves and consumers from fraud utilizing artificial intelligence. (B) A list of standard definitions for the different manners in which artificial intelligence is used, including terms like ''generative AI'', ''machine learning'', ''natural language processing'', ''algorithmic AI'', and ''deep fakes''. (C) A description of potential risks that could result from the use of artificial intelligence by bad actors to steal data and identities of consumers and commit fraud. (D) A list of best practices for financial institutions to protect their customers from attempts to steal data and identities of consumers or commit fraud. (E) Legislative and regulatory recommendations for the regulation of artificial intelligence and to protect consumers from data theft, identity theft, and fraud.
(d) The Task ForceTask ForceThere is established a Task Force on Artificial Intelligence in the Financial Services Sector (in this section referred to as the "Task Force").Sec. 3(a) shall terminate on the date that is 90 days after the date on which the final report is issued pursuant to subsection (c).
Establishes a federal Task Force composed of senior officials (or designees) from seven financial regulatory agencies: the Department of the Treasury (chair), the Office of the Comptroller of the Currency, the Federal Reserve Board of Governors, the FDIC, the CFPB, the NCUA, and FinCEN. The Task Force must solicit public feedback within 90 days and consult with depository institutions, credit unions, third-party AI vendors, and AI experts.
Within one year of enactment, the Task Force must submit a report to Congress covering AI-enabled fraud protections, standard AI terminology definitions, deepfake risks to consumers, best practices for financial institutions, and legislative and regulatory recommendations. The Task Force terminates 90 days after issuing its final report. No obligations are imposed on private-sector entities.