AMBR risk disclosure: AI agents and virtual assets
This AMBR risk disclosure covers two kinds of risk that apply when you use an agent with financial accounts: the agent can be wrong, out of date or manipulated, and the assets it reads, virtual assets above all, can lose value in full; the page lists both, gives the mandatory warnings for Dubai and Singapore and says what protection does not apply.
Version 0.1, prototype text. Published .
1. Summary in plain language
- An AI agent can be wrong, out of date or misled by what it reads.
- What an agent shows you is information, not advice.
- Virtual assets can lose all of their value, and quickly.
- A transfer on a blockchain usually cannot be undone.
- No deposit guarantee scheme or investor compensation scheme is claimed for any service described on this site.
Not financial advice. Crypto is highly volatile and may drop in value significantly. You may lose the amounts you invest and your investments do not benefit from any form of financial protection.
VARA's Marketing Regulations put it this way: "Virtual Assets may lose their value in full or in part, and are subject to extreme volatility".
2. Risks of AI agents
Ambre and MIA are AI systems. ESMA, the EU markets regulator, names these risks of AI in retail investment services: biased algorithms and poor data, opaque decisions, over-reliance, and privacy and security concerns (ESMA statement on AI in investment services).
Model error and made-up content
A language model can state something false with confidence, misread a figure or leave out a holding. Treat each output as a draft to check, not as a record.
Wrong or stale data
An agent is only as current as the data it receives. A feed from a brokerage, an exchange or a wallet can be late, incomplete or cut off, so a balance or a signal may describe the past.
Automation and over-reliance
Monitoring that runs without you makes it easy to stop checking. Signals are information, not advice, and a decision you take because of one is still yours. An agent that holds more permissions than its task needs adds to the risk; OWASP lists this as LLM06:2025 Excessive Agency.
Manipulated inputs
Text an agent reads, such as a web page, a news item or a message, can carry instructions written to mislead it. OWASP lists this as LLM01:2025 Prompt Injection (OWASP Top 10 for LLM Applications). The guide to risk controls for AI agents that touch digital assets explains the defences.
Availability
An agent, a data connection or a third-party provider can be unavailable when you need it. Do not make an agent your only way to see or reach your assets.
3. Risks of virtual assets
Volatility and total loss
Prices of virtual assets can move sharply within hours and can fall to zero. You can lose everything you put in.
Liquidity
At times there are few buyers. You may be unable to sell when you want to, or only at a much lower price.
Custody and counterparty
Assets held with an exchange, a custodian or another provider depend on that firm staying solvent and keeping its controls. If it fails or is hacked, you may not get your assets back.
Irreversible transfers
A transfer on a blockchain usually cannot be reversed. A wrong address, a wrong network or a payment to a fraudster is normally final.
This site describes no yield, staking or leverage product. If a licensed group entity offers such a service to its own clients, that entity's disclosures apply to it.
4. Disclosures by market
Each market has its own wording, kept in a separate block. The page on licences and regulatory status names each entity and its regulator.
Dubai (VARA)
Amber Premium FZE is licensed by VARA under VASP Licence VL/26/03/003. Amber Premium FZE is permitted to serve Institutional Investors and Qualified Investors, so its services are not offered to retail clients. The disclaimer for Dubai reads:
Not financial advice. Crypto is highly volatile and may drop in value significantly. You may lose the amounts you invest and your investments do not benefit from any form of financial protection.
Singapore (MAS)
MAS Guidelines PS-G02 set the expectation that digital payment token service providers do not promote their services to the general public in Singapore. This website does not promote the digital payment token services of Sparrow Tech Private Limited. The source is the MAS Guidelines PS-G02. The risk warning that MAS prescribes for digital payment token services has to be supplied by the Singapore entity and is not reproduced here.
Other markets
Elsewhere this site is information only and is not an invitation to invest. It does not solicit visitors in the United Kingdom.
5. No financial protection
No deposit guarantee scheme or investor compensation scheme is claimed for any service described on this site. If a provider fails, or you lose money after acting on a wrong output, do not expect a public scheme to cover the loss. The complaints procedure explains how to raise a problem. The terms of use and AI disclosure say what the agents are and are not, and the learn hub has guides that explain these risks in plain language.
6. Version history
Each published version of this page is archived. VARA's rules call for marketing records to be kept for eight years, and that period is applied to this page.
- Version 0.1, prototype text. First draft for review by counsel.
How these risks are limited
The security page sets out the controls on what the agents can read and do.