US banks block AI agents logged into customer accounts
Original title: Banks are blocking AI agents from customer accounts
Customers have shared bank usernames and passwords with agents, and several banks are steering tools toward read-only access.
Axios reported that major US banks are detecting third-party AI agents operating inside customer accounts, often with logins the customers supplied. JPMorgan Chase CEO Jamie Dimon said allowing arbitrary outside agents was too risky for clients and the bank. Bank of America has said customers who share credentials remain responsible for resulting activity. Many banks allow or are moving toward read-only access so tools can analyze transactions without moving money.
Unconfirmed: Bank motives are disputed: Bianco cites lost deposit revenue, while banks cite client risk.
- Jim Bianco raised the issue on Unchained's Bits + Bips livestream on October 26.
- A flaw in an agent service could expose credentials or let an account be misused.
- Read-only access still leaves statements exposed if an agent is compromised or manipulated.
- OpenAI recommends limiting agents to the data and credentials a task needs.
- Organizations
- JPMorgan ChaseBank of AmericaOpenAI
- Countries
- United States
From the original article
3 min read at malwarebytes.com
Banks say third-party AI agents put customer accounts at risk. Is security the only concern?
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.