FedNow matched RTP at a $10M network limit in November 2025 and added new risk rails - a receiver-account pre-check pilot, ScamClassifier reporting, an Exception Resolution Service, and 1,500+ banks live. Instant is treasury cash now, and batch-era controls just got a 24/7 bypass.
AI agents are arriving faster than most banking career ladders can adapt, and the market is already rewarding people who work with them. The career moat was never wiring up another API call. It is the judgment calls agents cannot own - which rail to trust, how much latency to spend, who the regulator will be.
The API worked. The books did not. A clean REST interface with pretty JSON still leaves accounting stitching exports for three days to answer one question - what happened to this payment across every rail and every failure path. ERP-grade APIs treat the contract as a shared language with finance.
Stripe, OpenAI, and Google shipped protocols that let AI agents complete purchases inside a conversation. The rails are already fast enough. The problem is that fraud detection was architected around a human clicking buy on a trusted surface, and agents break that assumption.
Your bank says it is "ISO 20022 ready" for the November 22 cutover. Check the docs and it is usually a translation layer - MT to MX at the SWIFT boundary, MX back to MT inside. That is compliant, and it quietly throws away the structured data that was the whole point.
Subscription billing has two bad options today - store the card or chase a manual approval every cycle. Variable recurring payments add a third: pre-authorized variable amounts with limits enforced by the rail. The UK is building it now, and the lesson for everyone else is about regulatory cycles, not technology.