India's Central Bank Evaluates AI Risks Amid Global Regulatory Talks
By John Nada·Apr 23, 2026·5 min read
India's central bank is assessing the cybersecurity risks posed by Anthropic's AI model Mythos, amid discussions with global regulators. This could significantly impact the regulatory framework for banks and financial institutions.
India’s central bank is actively engaging with global regulators and local banks to assess risks associated with Anthropic’s new AI model, Mythos. Preliminary evaluations indicate that Mythos could exacerbate cybersecurity vulnerabilities, prompting warnings from regulators across Asia, Europe, and the United States for banks to strengthen their defenses.
As the world becomes increasingly reliant on artificial intelligence, the implications for financial security are profound. The Reserve Bank of India (RBI) is at the forefront of these discussions, collaborating closely with global entities such as the U.S. Federal Reserve and the Bank of England. This international dialogue underscores the urgency with which regulators are treating the potential hazards posed by advanced AI technologies like Mythos. Each of these institutions recognizes that the rapid progression of AI capabilities could lead to significant shifts in the cybersecurity landscape.
Recent assessments suggest that Mythos may accelerate the discovery and exploitation of software vulnerabilities. This creates a pressing need for financial institutions to evaluate their current cybersecurity measures. Regulators in Asia, Europe, and the United States have all echoed similar sentiments, urging banks to review their defenses and preparedness in the face of these emerging threats. In Japan, for instance, the financial watchdog is convening with banks to specifically address the risks associated with AI technologies, while Australia's central bank is closely monitoring developments surrounding Mythos.
The RBI has been proactive in its approach, holding consultations over the past fortnight to discuss Mythos-related risks with its counterparts. These discussions are critical, as they facilitate the sharing of insights and strategies among regulators who are grappling with the same fundamental challenges presented by AI. The RBI's potential direct engagement with Anthropic aims to foster a deeper understanding of the threats posed by Mythos, which could lead to more informed regulatory decisions.
India’s National Payments Corporation (NPCI) has expressed a desire to secure early access to Mythos. This initiative is driven by the need to identify vulnerabilities and “day-zero” cyber risks before the model is more broadly rolled out. However, this endeavor is fraught with challenges. Anthropic's Mythos is hosted on strictly-controlled servers in the U.S., and the prospect of conducting tests on local data in foreign jurisdictions complicates matters further. Access to Mythos has been limited to a select few organizations involved in maintaining critical digital infrastructure in the U.S., making it difficult for the NPCI to gain the insights it seeks.
Despite these hurdles, the NPCI's efforts highlight the proactive measures being taken by Indian authorities to ensure that cybersecurity remains a top priority. The RBI is concurrently drafting guidelines for banks that plan to engage with advanced AI technologies, including Mythos and Anthropic’s Claude family. These guidelines are part of a broader strategy for AI adoption in India, emphasizing the importance of regulatory oversight in an increasingly complex technological environment.
A critical aspect of the RBI's strategy revolves around data localization. Since 2018, the RBI has mandated that all payment system providers in India store end-to-end transaction data, including user information and payment messages, exclusively on servers located within the country. This regulation is designed to protect sensitive information and bolster national security, especially in light of the rising sophistication of cyber threats.
The RBI's commitment to data localization will play a pivotal role in shaping the regulatory framework for banks and financial institutions engaging with AI. By insisting that all analytics based on the data of Indian customers comply with these localization rules, the RBI is not only safeguarding consumer data but also establishing a clear set of expectations for the operational practices of financial entities.
The discussions surrounding Mythos and its implications are indicative of a larger trend in which central banks around the world are grappling with the intersection of AI technologies and financial security. As AI continues to advance, the potential for misuse becomes a pressing concern. Regulators must navigate a delicate balance between fostering innovation and ensuring that adequate safeguards are in place to protect against emerging threats.
In the United States, the Federal Reserve has been vocal about the need for financial institutions to bolster their cybersecurity measures in light of AI advancements. This sentiment is echoed by the Bank of England, which has expressed similar concerns regarding the risks associated with AI technologies. The convergence of these regulatory perspectives underscores the global nature of the challenges posed by AI, as financial institutions operate in interconnected markets that transcend national borders.
The potential risks associated with AI models like Mythos extend beyond mere cybersecurity vulnerabilities. The rapid pace of technological change can lead to significant disruptions within financial markets, impacting everything from trading practices to consumer behavior. As such, regulatory bodies must remain vigilant in their oversight and adapt to the evolving landscape of financial technology.
In addition to cybersecurity risks, there are broader implications related to the ethical considerations of AI deployment in financial services. Questions surrounding algorithmic bias, transparency, and accountability have come to the forefront as regulators seek to understand the full spectrum of risks associated with AI. Ensuring that AI systems operate fairly and do not inadvertently discriminate against certain groups will be a critical component of the regulatory framework that emerges in response to these challenges.
As the RBI moves forward with its regulatory initiatives, it will be essential for stakeholders across the financial sector to engage in open dialogue. Collaboration between regulators, financial institutions, and technology providers will be crucial in addressing the complexities of AI and ensuring that the benefits of these technologies are realized without compromising security.
The RBI's approach to Mythos serves as a case study for other nations grappling with similar challenges. By prioritizing cybersecurity and data localization, India is positioning itself as a leader in the global conversation about AI regulation. This proactive stance could inspire other countries to adopt similar measures as they navigate the complexities of AI and its implications for financial security.
