US banks report unauthorized AI agents in customer accounts
Original title: Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts
Access reportedly begins when customers share banking passwords with assistants, and Axios described no confirmed widespread theft.
An Axios report, which Reuters said it could not immediately verify, says major US banks are finding third-party AI agents inside customer accounts. Reported access generally starts when customers share usernames and passwords, which conflicts with rules at most banks requiring customers to log in themselves. Morgan Stanley has begun blocking third-party agents, while JPMorgan, Bank of America and Citi are restricting access. Most banks have approved, or are moving toward, read-only access.
Unconfirmed: Reuters could not verify the Axios report, and the article does not establish that every named bank detected unauthorized agents.
- Named institutions include Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo.
- A Morgan Stanley spokesperson said it had not observed rogue AI agents on its platforms.
- A Chase spokesperson warned customers not to share usernames and passwords.
- Banks are preparing recovery plans if incidents occur, Axios reported.
Impact: Possible unintended account actions after customers share logins
- 1.Do not give banking usernames and passwords to outside AI tools.
- 2.Follow the bank’s account-access rules.
- Countries
- United States
From the original article
3 min read at cybersecuritynews.com
Major U. S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.