Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts
Major U.S. banks are reporting unauthorized third-party AI agents accessing customer accounts, raising concerns about automated tools acting beyond user intent. While not necessarily a security breach, the activity complicates the ability of banks to distinguish between legitimate customer actions and autonomous agent behavior.
Why it matters
This highlights a growing friction between consumer-driven AI adoption and institutional banking security protocols, posing risks for financial liability and account integrity.
Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them. Some agents have contacted call centers or appeared to attempt independent actions, according to an Axios report published October 22, citing people familiar with the matter.
Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are among the institutions working to contain these risks. However, the report does not establish that every named bank detected unauthorized agents. Reuters also reported the findings but said it could not immediately verify them.
The reported access generally starts with customers sharing their banking usernames and passwords with an AI assistant. Customers may approve that access, but the bank may not. Axios reported that such arrangements conflict with rules at most banks requiring customers to log in themselves.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in