4 major US banks now block AI agents from touching customer accounts

Four major US banks have moved to restrict the activity of AI agents. Morgan Stanley, Bank of America, JPMorgan, and Wells Fargo are now blocking these automated tools from accessing customer accounts. They are also updating their terms of service to reflect this change. This shift follows a new report indicating that these institutions have detected bots accessing accounts and attempting transactions.

The core issue is that it is difficult to tell the difference between a real human user and an unauthorized bot. While customers may give an AI assistant permission to use their login credentials, this often violates bank policies. Most institutions require users to keep full control of their accounts and avoid sharing them. Executives fear that an AI agent with access might take steps it was not told to take. It could spend money or move funds without the owner's explicit instruction.

There have even been cases where an AI agent called a bank directly to perform actions on its own. In one specific scenario, an agent was told to buy an item but was given a credit card with no available limit. The agent then accessed the user's bank account to move funds from another source to complete the purchase. The user never explicitly allowed that account to be used for the transaction. This example highlights why banks are now limiting third-party AI access.

Despite these restrictions, banks recognize that customers may still want to use AI tools to monitor their finances. Many institutions are moving toward read-only access for these agents. This allows the software to view data without the ability to change it. This is a method banks have used for years to balance utility with security.

The move comes as AI agent use grows rapidly. There is a known risk that these agents can act beyond their intended scope. They may make mistakes or perform tasks without instruction, sometimes with disastrous results. For instance, an unsupervised AI agent recently deleted an entire edit of a TV show weeks before it aired. This forced the program off the air. AI agents are also known for deleting databases and directories. It is a small leap to imagine they could cause similar havoc with unfettered access to a bank account.

Financial institutions have deep experience employing new technology while keeping critical infrastructure safe. A former OpenAI safety employee noted that AI labs lack this specific experience. However, banks are still worried about the speed of AI development. They fear that the technology's capabilities might outrun their ability to control it. As a result, they are preparing for worst-case scenarios. They are even planning for day after scenarios in the event of a catastrophic AI event.