Major US banks block external AI agents using clients’ login credentials
Major US banks are restricting external AI agents that access accounts using clients’ login credentials. Morgan Stanley already blocks them entirely. Most banks want to allow agents only to read data.
Major US banks are restricting external AI agents’ access to accounts through login credentials provided by clients, according to Axios. Morgan Stanley already blocks agents entirely; according to the report, JPMorgan, Bank of America and Citi also block them. Wells Fargo is among the banks restricting this access.
Logging in this way violates bank rules requiring account holders to log in personally. Most banks want to allow agents only to read data, without the ability to perform operations. According to the banks, clients are interested in using agents, but the banks consider the current security risks too high. Many banks also cannot distinguish whether an agent is acting on a user’s instructions or independently.
The report states that some agents appear to act without direct instructions from users; however, this does not establish that agents have acted without user direction on all the platforms mentioned. Morgan Stanley explicitly stated that it had not observed AI agents acting without user direction on its platforms.
Why it matters
Giving an agent login credentials does not in itself secure the bank’s consent to its access. The intended restriction to reading data would allow agents to view account information, but not perform banking operations; this distinction determines the scope of possible automation.
Two audiences, two different impacts
What this means
For individuals
Clients of the banks concerned cannot count on an agent gaining access to their account simply because they have provided it with login credentials.
For a business
Companies developing automation for bank accounts must design integrations to account for blocked access through client logins and banks’ requirement to limit agents to reading data.
DevelopmentCheck the original
Event sources
only one source so far · 1 publisher, 1 independent. We count feeds from the same owner only once.