US banks curb third-party AI agents tied to shared customer logins
Original title: Unauthorized AI Agents Found Accessing Customer Accounts at Major U.S. Banks
Axios says the issue is customers authorizing agents, not a breach of bank systems or stolen credentials.
Axios reported on October 22 that Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and others are responding to customers who share logins with third-party AI agents. The report says attackers did not breach bank infrastructure or steal credentials. Morgan Stanley is blocking third-party agents and says it has not detected rogue agents on its platforms. JPMorgan, Bank of America and Citi are also restricting agent access, with many banks moving toward read-only use.
Unconfirmed: The Axios report does not establish which banks observed unauthorized access, and Morgan Stanley says it has not found rogue agents.
- A Chase spokesperson told customers not to share usernames or passwords.
- Executives worry agents could transfer funds or contact call centers.
- Banks say they struggle to separate human activity from agent actions.
- Read-only agent access is compared with apps such as Quicken.
- Restrictions do not confirm every named bank saw unauthorized access.
Impact: customer-shared credentials let AI agents use bank accounts
- 1.Do not share bank usernames or passwords with third-party AI agents.
- Organizations
- Morgan StanleyBank of AmericaJPMorganWells FargoCiti
- Countries
- United States
From the original article
2 min read at gbhackers.com
U. S. banks face challenges as third-party artificial intelligence agents detect unauthorized access to customer accounts.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.