{"slug": "ai-agents-are-accessing-u-s-bank-accounts-without-their-approval-lenders-are", "title": "AI Agents Are Accessing U.S. Bank Accounts Without Their Approval. Lenders Are Pushing Back.", "summary": "JPMorgan Chase, Morgan Stanley, Bank of America, Wells Fargo and Citigroup are blocking or restricting third-party AI agents that access customer bank accounts without bank authorization, according to an Axios investigation cited in reports. JPMorgan CEO Jamie Dimon said on the bank's latest earnings call that \"we're not going to allow just any outside agents to come in inside the company,\" while CFO Jeremy Barnum said JPMorgan is blocking credential sharing and screen scraping where possible and warned customers could face consequences if an agent they authorized carries out an unwanted transaction. Morgan Stanley has begun blocking third-party agents from its platforms, though a spokesperson said the bank had not observed rogue AI agents accessing its systems.", "body_md": "# AI Agents Are Accessing U.S. Bank Accounts Without Their Approval. Lenders Are Pushing Back.\n\n## Some automated assistants appear to be taking actions beyond users' instructions, prompting questions about account security and who bears responsibility when something goes wrong.\n\nMajor [U.S. banks](https://www.ibtimes.com/topic/us) are detecting third-party [artificial intelligence](https://www.ibtimes.com/topic/ai) agents accessing customer accounts without bank authorization, with some automated tools appearing to act independently of their users' instructions, according to a new report.\n\nMorgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are among the institutions responding to the activity, which has raised concerns about customer security and the ability of banks to monitor increasingly sophisticated software.\n\nThe [Axios investigation](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) cited people familiar with the matter who said some banks were aware of unauthorized access involving AI agents. In certain cases, the tools contacted bank call centers or appeared to perform tasks that customers had not specifically requested.\n\nThe reported incidents do not necessarily involve hackers breaking into accounts. Some customers voluntarily provide their login credentials to AI assistants designed to manage financial information or complete tasks on their behalf. However, using those credentials to access banking systems can violate institutional policies, even when the customer has granted permission.\n\nBanks are struggling to distinguish between legitimate customer activity, authorized software and agents operating outside their intended instructions, the report said.\n\nJPMorgan Chief Executive Jamie Dimon addressed the issue during the bank's latest earnings call last week, warning that financial institutions needed safeguards against outside AI tools that could compromise customer information or financial assets.\n\nDimon said the bank was not opposed to using AI agents and was already deploying the technology internally. However, it would not allow unrestricted access by outside providers.\n\n\"We're not going to allow just any outside agents to come in inside the company,\" Dimon said, explaining that the risks were too significant for customers and the bank.\n\nIn the [JPMorganChase third-quarter earnings transcript](https://www.jpmorganchase.com/content/dam/jpmc/jpmorgan-chase-and-co/investor-relations/documents/quarterly-earnings/2026/3rd-quarter/3q26-earnings-transcript.pdf), Dimon also raised concerns about liability when customers rely on AI tools that subsequently misuse their information.\n\nChief Financial Officer Jeremy Barnum provided further details about the bank's approach. He said some outside financial services obtain access through credential sharing or screen scraping, a process in which software retrieves information directly from a customer's online banking interface.\n\nJPMorgan considers those methods insecure and is blocking them where possible, Barnum said. He cautioned that customers could face consequences if they gave their credentials to an agent that subsequently carried out an unwanted transaction.\n\nThe bank is developing ways to support such services through more secure connections rather than allowing automated tools to operate using ordinary customer logins.\n\nOther financial institutions are adopting their own restrictions. Morgan Stanley has begun blocking third-party agents from its platforms, according to people familiar with the decision cited by Axios. However, a spokesperson told the publication that the bank had not observed rogue AI agents accessing its systems.\n\nBank of America and Citigroup are also restricting outside AI agents, while Chase has warned customers against sharing usernames and passwords with third parties.\n\nThe different responses indicate that some institutions are taking preventive measures rather than reacting to confirmed unauthorized activity on their own platforms.\n\nAI agents differ from traditional chatbots because they can perform tasks rather than simply answer questions. A financial assistant might be instructed to review spending, compare savings accounts, prepare a budget or help move funds between institutions.\n\nTo perform those functions, the software may require access to sensitive financial information. The level of risk depends partly on whether it can only view account data or has permission to initiate transactions.\n\nThe [Consumer Financial Protection Bureau](https://www.consumerfinance.gov/archive/blog/what-to-consider-when-sharing-your-financial-data/) has previously advised consumers to examine how financial applications use their data before connecting them to bank accounts.\n\nThe agency recommends checking whether a service can initiate payments, how frequently it accesses information and whether that information is shared with other companies.\n\nIt also advises customers to review account statements for unfamiliar transactions and revoke access when they stop using a service.\n\nSimply deleting an application from a phone does not necessarily terminate its permission to retrieve financial data, the CFPB has warned.\n\nBeyond security, financial institutions are examining how automated assistants could change the way customers manage their money. During JPMorgan's October earnings call, Barnum discussed the possibility that personal AI agents could make it easier for customers to compare interest rates and shift deposits between banks.\n\nSuch tools could intensify competition for savings by helping customers identify better returns without manually researching different financial products.\n\n© Copyright IBTimes 2026. All rights reserved.", "url": "https://wpnews.pro/news/ai-agents-are-accessing-u-s-bank-accounts-without-their-approval-lenders-are", "canonical_source": "https://www.ibtimes.com/ai-agents-are-accessing-us-bank-accounts-without-their-approval-lenders-are-pushing-back-3808868", "published_at": "2026-10-22 15:10:12+00:00", "updated_at": "2026-10-22 16:10:33.444478+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-policy"], "entities": ["JPMorgan Chase", "Morgan Stanley", "Bank of America", "Wells Fargo", "Citigroup", "Jamie Dimon", "Jeremy Barnum", "Axios"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ai-agents-are-accessing-u-s-bank-accounts-without-their-approval-lenders-are", "markdown": "https://wpnews.pro/news/ai-agents-are-accessing-u-s-bank-accounts-without-their-approval-lenders-are.md", "text": "https://wpnews.pro/news/ai-agents-are-accessing-u-s-bank-accounts-without-their-approval-lenders-are.txt", "jsonld": "https://wpnews.pro/news/ai-agents-are-accessing-u-s-bank-accounts-without-their-approval-lenders-are.jsonld"}}