Between 2012 and 2022, financial services ran multi-year programmes to remediate End User Computing (EUC) risk from uncontrolled spreadsheets feeding regulated processes, using a risk-tiered register that left low-risk tools in place and rebuilt high-risk ones as governed applications. The same pattern is now emerging with AI based managed copilot platforms, which let business users build agents, automate workflows, and interact with organizational data through natural language without writing code. The article says the tool is more powerful, risk materializes faster, and the governance gap is wider, making uncontrolled AI agent development the next generation of EUC risk. It notes discovery is the prerequisite most governance frameworks skip, and a four-tier classification model can help financial institutions capture citizen AI productivity gains without repeating past remediation cycles. The opportunity is genuine: a Head of Financial Crime Operations can prototype an alert triage assistant over a weekend, a collections manager can build an agent that drafts personalized customer communications based on real-time account data, and a compliance team can deploy a research agent that synthesizes regulatory consultations across multiple jurisdictions in minutes rather than days. McKinsey estimates an annual productivity potential of $200 billion to $340 billion across global banking — equivalent to 9 to 15 percent of operating profits — largely from increased productivity in knowledge-intensive operations.