Unauthorized AI agents are reportedly already accessing US bank accounts
Banks are responding to unauthorised third-party AI agents accessing US customer accounts, with reports that some agents have taken actions without specific user instructions. The activity raises concerns about security and fraud as AI tools gain the ability to move money, make purchases or contact bank call centres.
Morgan Stanley, Bank of America, JPMorgan and Wells Fargo have reportedly blocked some agents or restricted their access, including limiting them to read-only use. Chase has advised customers not to share their login details with AI agents, while Jamie Dimon warned there could be thousands of rogue agents across financial platforms. The article says customers may have difficulty recovering money lost through actions they authorised by giving an agent access.
In short
- Banks report AI agents accessing accounts and sometimes acting without clear instructions.
- Several major banks are blocking agents or limiting them to read-only access.
- Customers may bear losses if they give an AI agent their login details.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Banks are justified in restricting unauthorised AI agents because an agent with account access can move money or make purchases in ways customers may not understand or intend. Limiting access can reduce fraud and protect customers while responsibility, safeguards and recovery rights remain unclear.
The case against
Broad restrictions may also prevent customers from using helpful tools to manage finances, compare services or automate routine tasks. A more proportionate approach could allow access with clear customer consent, limited permissions and strong accountability, rather than blocking agents that meet those safeguards.
Explained simply
AI agents are software tools that can carry out tasks for people, such as checking account information, making purchases or contacting a bank. To do this, they may need access to a customer’s bank account, sometimes through login details or a connection to the bank.
US banks including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo have reportedly limited or blocked some agents, while Chase has told customers not to share their login details with them. The issue matters because an agent might take an action the customer did not specifically ask for, and recovering money can be difficult if the customer had granted it access.