{"slug": "ai-agents-are-slipping-into-us-bank-accounts-and-banks-say-they-cant-tell-if-you", "title": "AI agents are slipping into US bank accounts, and banks say they can’t tell if you sent them", "summary": "JPMorgan Chase chief executive Jamie Dimon said on the bank's October 13 third-quarter earnings call that JPMorgan will not admit unvetted outside AI agents into its systems, warning \"you don't want rogue agents, and there could be thousands of them,\" as Morgan Stanley, Bank of America, Wells Fargo and Citi move to contain unauthorized agents found operating in customer accounts, Axios reported on Thursday. JPMorgan chief financial officer Jeremy Barnum said customers who hand their credentials to an agent bear the risk: \"If they give up their credentials to the agent, and the agent does something that they don't want, that's going to be on them.\" Wells Fargo's updated online access agreement, effective November 24, adds a \"Third-Party Artificial Intelligence Agents\" section deeming any agent action \"initiated and authorized directly by you, without further verification\" and stating use is \"AT YOUR OWN RISK,\" while Bank of America limits agents' access to deposits and Citi blocks third-party agent logins and transactions entirely.", "body_md": "JPMorgan chief executive Jamie Dimon at 11 Downing Street, London, in October 2025. Image: Lauren Hurley / No 10 Downing Street / Open Government Licence v3.0\n\nBig US banks are finding AI agents they never approved working inside customer accounts, and some of those agents appear to be doing things nobody asked them to. Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and others are racing to contain the risk, [Axios reported](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) on Thursday, citing people familiar with the matter. None of the banks has confirmed the account in full.\n\n## What the banks are seeing\n\nMost cases, according to Axios, involve a customer handing an agent or AI assistant their own username and password. Even with the customer’s blessing, that breaks most banks’ rules, which say a human must log in. Some banks have also tracked agents phoning call centres or taking actions that seem independent of what the user asked for, the people said.\n\nThe hardest part is telling who is who. Many banks can’t work out whether an agent’s activity was directed by the customer, Axios reports, and one bank executive said they struggle to tell whether an agent was authorised by a user or has gone rogue. Bank executives described the situation as horrifying.\n\nNot every bank accepts the picture. A Chase spokesperson told Axios that customers shouldn’t give their usernames and passwords to anyone, and a Morgan Stanley spokesperson said the bank hasn’t observed “rogue AI agents accessing our platforms”, although people familiar with the decision say Morgan Stanley has started blocking third-party agents.\n\n## “There could be thousands of them”\n\nThe crackdown began last week. On JPMorgan’s third-quarter earnings call on October 13, chief executive Jamie Dimon said the bank would not let unvetted outside agents into its systems:\n\nYou don’t want rogue agents, and there could be thousands of them.\n\nJamie Dimon, JPMorgan chief executive\n\nOutside agents can still read balances through approved connectors such as Plaid, but they can’t send money or pay bills, a JPMorgan spokeswoman told CNBC. Chief financial officer Jeremy Barnum warned on the same call that customers who share their logins [carry the risk themselves](https://www.americanbanker.com/news/jpmorgan-warns-of-risks-to-consumers-who-rely-on-ai-agents):\n\nIf they give up their credentials to the agent, and the agent does something that they don’t want, that’s going to be on them.\n\nJeremy Barnum, JPMorgan chief financial officer\n\nBank of America is limiting agents’ access to deposits while it works out with agent developers who is liable when an AI authorises a payment, and Citi doesn’t let third-party agents log in or transact at all, the [Financial Times reported](https://www.ft.com/content/f49c8e39-f07f-4177-9948-aabe55e5ed91). Bank of America chief executive Brian Moynihan told CNBC there should be “a human in the loop to authorise money moving out of your account”. At Charles Schwab, chief executive Rick Wurster told Bloomberg the brokerage blocks big unauthorised agents, including Meta’s Muse, “in the tens and 20s” each week.\n\n## Wells Fargo’s answer: it’s on you\n\nWells Fargo is taking a different line. Its [updated online access agreement](https://www.wellsfargo.com/online-banking/online-access-agreement/upcoming/), which takes effect on November 24, adds a whole section on “Third-Party Artificial Intelligence Agents”. It sets out customers’ responsibilities “if and when we permit the use of such agents”, and it puts the risk squarely on them. If you give an agent your login, anything it does is “deemed to have been initiated and authorized directly by you, without further verification”, and the bank has no duty to check.\n\nThe terms say using an agent is “AT YOUR OWN RISK”, that Wells Fargo does not “monitor, screen, or review” what agents do, and that customers answer for an agent’s “unintended actions”, its mistakes and “manipulated inputs”, unless the law says otherwise. The bank also keeps the right to make customers register their agents with it, or to block agents altogether.\n\n## Agents are moving into money\n\nThe pressure comes from personal agents that act for you have arrived fast. Meta’s [Muse](https://madrobot.blog/2026/09/25/what-is-meta-muse-ai-agent-explained/) launched in September with access to users’ accounts, OpenAI unveiled its always-on Dots agent at [DevDay](https://madrobot.blog/2026/09/29/openai-devday-2026-everything-announced-dots-gpt-6-1-sol-pro-500/), and this week Anthropic launched [Claude Duet](https://madrobot.blog/2026/10/21/anthropic-claude-duet-proactive-agent-app-morning-brief-pro-max/) while Walmart [opened its shops to AI agents](https://madrobot.blog/2026/10/21/walmart-agent-gateway-ai-agents-shop-for-you-amazon-blocks/). Some draw their own line at money: Claude Duet won’t trade securities or move money between accounts, even with your approval.\n\nThe rules haven’t caught up. The G20’s Financial Stability Board told banks last week to give [each of their own AI agents an ID and a human who can stop it](https://madrobot.blog/2026/10/15/fsb-g20-watchdog-ai-agents-banks-kill-switch-sound-practices/), but that guidance covers the agents banks run, not the ones customers bring. Regulators have privately backed the banks’ blocks, the FT reported.\n\n## Why it matters\n\nAI agents are only useful if they can act for you, and your bank account is where a mistake costs the most. For now the big banks’ answer is read-only access at best, and at Wells Fargo the fine print says that if you hand an agent your password, whatever it does is on you.\n\n*Sources: [Axios](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access); [Wells Fargo Online Access Agreement (effective November 24, 2026)](https://www.wellsfargo.com/online-banking/online-access-agreement/upcoming/); [PYMNTS (JPMorgan earnings call)](https://www.pymnts.com/news/artificial-intelligence/2026/jamie-dimon-slams-the-door-on-rogue-ai-agents/); [American Banker](https://www.americanbanker.com/news/jpmorgan-warns-of-risks-to-consumers-who-rely-on-ai-agents); [Financial Times](https://www.ft.com/content/f49c8e39-f07f-4177-9948-aabe55e5ed91).*", "url": "https://wpnews.pro/news/ai-agents-are-slipping-into-us-bank-accounts-and-banks-say-they-cant-tell-if-you", "canonical_source": "https://madrobot.blog/2026/10/22/ai-agents-us-bank-accounts-jpmorgan-wells-fargo-morgan-stanley-unauthorized/", "published_at": "2026-10-22 10:06:00+00:00", "updated_at": "2026-10-22 10:13:37.366214+00:00", "lang": "en", "topics": ["ai-agents", "ai-policy", "artificial-intelligence"], "entities": ["JPMorgan Chase", "Jamie Dimon", "Jeremy Barnum", "Morgan Stanley", "Bank of America", "Wells Fargo", "Citi", "Charles Schwab"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ai-agents-are-slipping-into-us-bank-accounts-and-banks-say-they-cant-tell-if-you", "markdown": "https://wpnews.pro/news/ai-agents-are-slipping-into-us-bank-accounts-and-banks-say-they-cant-tell-if-you.md", "text": "https://wpnews.pro/news/ai-agents-are-slipping-into-us-bank-accounts-and-banks-say-they-cant-tell-if-you.txt", "jsonld": "https://wpnews.pro/news/ai-agents-are-slipping-into-us-bank-accounts-and-banks-say-they-cant-tell-if-you.jsonld"}}