Skip to content

Solutions · Use case

Payments & refunds

Let agents move money — inside limits you set, with a human where it matters.

Relevant for Banking & payments, Insurance, Capital markets & wealth

  • Typical agents

    Refund, payments-operations and treasury agents

  • Systems touched

    Payment hubs, core banking, card and refund platforms

  • Who approves

    Payments operations, treasury and fraud teams

The risk

What can go wrong

Payment and refund agents work at machine speed with real permissions. A misread instruction, an injected prompt or a split payment can move money before anyone looks — and the accountability stays with you.

  • Manipulated instructions

    An injected prompt in an email or ticket asks the agent to pay a new beneficiary. The agent has the permission, so the payment goes.

  • Limits split to avoid review

    A large amount is broken into several smaller payments that each fall under a threshold no person ever sees.

  • No proof of authorisation

    After the fact, logs show a payment was sent, but not who authorised it, under which rule, or whether it matched what was approved.

Typical decisions

How GREENLIGHT typically decides

Each action an agent proposes gets one of four outcomes, with a reason a reviewer and an auditor can read.

Agent actionTypical outcomeWhy
Refund within policy limitsAllowAmount and payee are within the refund policy.
Large outbound wireRequire human approvalAmount is above the threshold that needs a second person.
New or changed beneficiary on a transferRequire human approvalA beneficiary change on a transfer is a consequential change.
Payment the rules do not recogniseEscalateNo rule recognises the payment type, so it is not allowed silently.
Transfer to a blocked destinationBlockThe destination is on a blocked list.

Illustrative. Outcomes follow your policies and thresholds.

One action, end to end

A large outbound wire, end to end

What happens between the moment an agent decides to act and the moment your system changes. Figures are illustrative.

  1. 1
    Agent

    A payments agent prepares a S$250,000 transfer to a supplier and asks GREENLIGHT before calling the payment API.

  2. 2
    GREENLIGHT

    The amount is above the approval threshold, so the decision is require human approval, with the reason and the deciding rule.

  3. 3
    Approver

    A treasury approver who did not initiate the payment reviews the amount, payee and context, and approves it.

  4. 4
    GREENLIGHT

    The approved transfer is released once, with an execution visa bound to that amount and payee.

  5. 5
    Logbook

    The request, decision, approval and release are written to the signed logbook, ready for audit.

The difference

Without GREENLIGHT, and with it

Without a decision pointWith GREENLIGHT
A payment to a new beneficiarySent if the agent’s service account allows itHeld for a named approver before it is sent
Amounts split under a thresholdEach part passes on its ownEvaluated against your limits and flagged for review
Proof for audit or a complaintApplication logs pieced together laterOne signed record of request, decision and approval

Rollout

Start in shadow, enforce when you are ready

For this use case, as for every other, GREENLIGHT starts by watching. Nothing is blocked until you decide it should be.

  1. Shadow

    GREENLIGHT evaluates every action and records what it would have decided. Nothing is blocked, so you can measure before you change anything.

  2. Advisory

    Decisions are returned to the agent and to your teams as recommendations, and policies are tuned against real traffic.

  3. Enforce

    Holds and blocks are switched on workflow by workflow, starting where the risk is highest and the evidence is clearest.

Get started

Start with this workflow.

Bring one Payments & refunds workflow into GREENLIGHT in shadow mode. We will show you what it would decide on your real traffic, then agree with you when to enforce.