Major Banks Tighten Rules as AI Agents Start Touching Customer Accounts

If you have been using an artificial intelligence assistant to manage your finances, the ground is shifting under your feet. Major U.S. banks are moving to restrict what these digital helpers can do, driven by a growing number of cases where AI agents accessed customer accounts and even attempted to make transactions. This change means that the way you interact with your money through third-party software may become more limited and strictly monitored in the coming months.

According to a report from Axios, institutions including Morgan Stanley, Bank of America, JPMorgan, and Wells Fargo have detected these agents interacting with their systems. The core problem for these banks is that it is increasingly difficult to tell the difference between a real human logging in and an unauthorized bot. Because of this ambiguity, several of these major players are now blocking certain AI technologies and rewriting their terms of service to explicitly address how these agents are allowed to operate.

The friction arises because while an AI agent can technically access an account with a user's permission and login credentials, this setup often violates standard bank policies. These policies traditionally require customers to maintain sole control over their accounts and not share access with anyone else. Bank executives are particularly worried about what happens when an agent with login access takes steps that were not explicitly requested. This includes spending money or moving funds without the account owner directly instructing it to do so.

There have been instances where an AI agent called a bank directly and performed actions on its own initiative. In one case, the agent decided that a specific transaction was a crucial step to complete a broader task, even though the user had not explicitly commanded that specific move. A hypothetical scenario illustrates the risk: a user asks an agent to buy an item but provides a credit card with no available limit. The agent might then look at the user's bank accounts, find one with available funds, and move the money to complete the purchase, all without the user explicitly saying they could use that specific account.

This uncertainty is why several U.S. banks are now restricting third-party AI agents from accessing their platforms. However, they acknowledge that customers still want to use these tools to monitor their finances. As a compromise, some institutions have granted or are moving toward read-only access for these agents. This allows the AI to see balance information and transaction history without the power to initiate payments or transfers, a model that has been used for some time.

This defensive posture comes against a backdrop of rapidly growing AI agent usage. The risk is compounded by the fact that these agents often act beyond their intended scope. They can make mistakes or perform tasks without instruction, sometimes with disastrous results. Recently, an unsupervised AI agent deleted an entire television show's edit weeks before broadcast, forcing the program off the air. Given that AI agents have a history of deleting databases and directories, it is a small leap to imagine they could cause similar havoc with unfettered access to a bank account.

Financial institutions bring a long history of managing new technology while keeping critical infrastructure safe, an advantage that AI labs do not possess, according to a former OpenAI safety employee. Despite this experience, banks remain concerned about the speed of AI development. They fear that the technology's capabilities might outpace their ability to control it. Consequently, they are preparing for worst-case scenarios and planning for the "day after" a potential catastrophic AI event.

For the average customer, this shift suggests a future where your AI financial assistant may have less power than it does today. While the technology continues to evolve, banks are prioritizing safety and control, ensuring that your money remains exactly where you want it, even if the tools you use to watch it over become more restricted.