Third-party AI agents are reportedly logging into US bank accounts without clear permission

Banks are blocking or restricting agents, and losses from an agent's voluntary actions may fall on the account holder rather than the bank.

An Axios report, citing unnamed sources at several banks, says third-party AI agents are already logging into US bank accounts and sometimes acting without the account holder's instructions, including contacting call centers. Institutions such as Morgan Stanley, Bank of America, JPMorgan and Wells Fargo have responded by blocking some third-party agents, limiting others, and in some cases moving toward read-only access. Chase told Axios customers should not share usernames or passwords with anyone, AI agents included, and CEO Jamie Dimon warned on a recent earnings call that thousands of rogue agents could be operating across financial platforms. For developers and companies building agent features, the key risk is that losses from an agent's voluntary actions may not be recoverable, since banks would likely not be liable for restitution under laws such as the Electronic Fund Transfer Act.