Taiwan’s Financial Supervisory Commission listed customer-service chatbots from CTBC Bank, Taipei Fubon Bank, and E.SUN Bank on its AI model trust registry after a six-month supervised pilot, according to an FSC bulletin published September 24 and onboarding checklists the Banking Bureau sent participating lenders. Registration is not a product approval; it is a transparency regime that requires published model cards, human handoff rules, and quarterly bias reviews for generative assistants that answer balance, payment, and card-dispute questions.

What the registry requires

Banks must disclose training data categories—without leaking customer content—plus languages supported, retention policies for chat logs, and maximum autonomous resolution scopes before mandatory escalation. Model cards list third-party LLM vendors and whether prompts are filtered for investment advice, which remains restricted to licensed sales channels.

Institutions run quarterly bias tests on scripted scenarios covering elderly users, Indigenous language queries, and dispute-heavy flows; results upload to FSC portals auditors can sample.

What changed after the pilot

During the pilot, banks capped chatbot sessions on wire-transfer instructions and required step-up authentication for any payment over published thresholds. The registry formalizes those guardrails and adds public complaint tags so consumers can cite registry IDs when filing FSC grievances.

Chatbots that failed pilot exit criteria—such as ambiguous fraud-alert wording—were withheld from registration until vendors shipped prompt patches reviewed by bank compliance.

Consumer-facing differences

Mobile banking apps now show registry badges on chat entry points and link to simplified Chinese and English explainers on what bots can and cannot do. Human agents receive transcript exports when customers type “speak to staff” or when sentiment classifiers flag distress keywords defined in the pilot protocol.

Credit unions and smaller lenders are not in this cohort; FSC said it will open a second intake for regional banks after reviewing call-center staffing impacts during Mid-Autumn surges.

Competitive and vendor landscape

Each listed bank uses different cloud LLM backends under Taiwanese data-residency contracts; the registry treats vendor choice as disclosure, not standardization. Fubon emphasized on-premise masking of account numbers; CTBC highlighted multilingual templates for overseas cardholders; E.SUN documented integration with its existing fraud-scoring API.

Insurtech lobbyists asked whether registry rules will extend to policy chatbots; FSC’s bulletin scoped the first list to deposit and payment institutions only.

Supervision through year-end

Banking Bureau examiners will sample chat logs in Q4 for hallucinated fee quotes—a pilot failure mode that triggered manual refunds in two test cases. Banks must notify FSC within seventy-two hours if vendors ship foundation-model upgrades that change safety filters.

For households, the practical test is whether disputes resolve faster with logged bot sessions; advocates said registry IDs give non-lawyers a concrete reference when escalating to the FSC consumer hotline.

Financial Information Service Co. teams said interbank QR and wallet dispute flows will not merge with chatbot transcripts until 2026 API specs finalize—customers should still save screenshots for chargebacks even when bots acknowledge complaints.

Taiwan Academy of Banking and Finance plans December workshops for branch managers on explaining registry badges to elderly customers who distrust non-human agents—a training layer the pilot showed matters as much as model accuracy.

Consumer groups asked FSC to publish aggregate complaint counts tagged to registry IDs each quarter; the commission said it will pilot aggregated statistics in 2026 after banks redact account identifiers from chat exports.

Vendor contracts now require Taiwanese-language safety benchmarks before model upgrades ship to mobile apps—a clause negotiators added after pilot tests showed English-only guardrails missed Traditional Chinese colloquial payment slang.

Foreign banks operating Taiwan branches said they are mapping registry fields to home-country model-risk frameworks; FSC staff emphasized local registration remains mandatory even when parent entities already file abroad.

Law firms publishing September client memos said registry badges do not immunize banks from ordinary consumer-dispute liability—they only standardize the evidence trail examiners and customers can cite during investigations.

Mobile app update notes for the three banks list registry IDs in release changelogs so IT auditors can match deployed builds to filed model cards.