Banks Are Freaking Out Over Personal AI Agents Accessing Customer Accounts

Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and Citi are rewriting their terms of service to ban personal AI agents from customer accounts and reinforcing that customers should never share login credentials with anyone, including an AI agent, Axios reported on October 22, 2026. Morgan Stanley, which said it has no evidence yet of "rogue AI agents accessing our platforms," has banned all third-party access to customer accounts, while Charles Schwab CEO Richard Wurster told Reuters the firm blocks agents daily but that "it's not many because I think people aren't using it in that way in their financial life." The banks are preparing processes to shut down and restore account access over concerns about unauthorized purchases and transfers, and the report notes a possible future middle ground since banks already permit third-party access for programs like Quicken.

As the popularity of personal AI agents like Meta's Muse begins to grow, banks are already seeing issues with agents conducting unauthorized activities, and they're already rewriting their terms of service to ban the use of these bots. Of course the idea of having an automated assistant who can accomplish tedious tasks for you like paying bills and making reservations is attractive to many, and the AI age has already answered with product's like Meta's Muse and Microsoft Copilot. But while users may give authorization to their personal agent to access their bank accounts, this presents a whole new set of problems for the banks themselves. As Axios reports https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access?ref=sfist.com , bank executives across the industry are grappling with the rising tide of AI agents meddling in customer accounts, and at times appearing to conduct actions beyond those that they've been authorized to conduct — like contacting customer service on the user's behalf. Banks are taking steps to rewriting their terms of service to ban the use of AI agents, and reinforcing the rule that bank customers should never share their login information with anyone, including an AI agent. Morgan Stanley, Bank of America, JPMorgan, Wells Fargo, and Citi all are taking steps, per Axios, to guard against agents going rogue, or the legal and financial ramifications of widespread, unauthorized activity in customer accounts. The banks are worried, clearly, about customers coming back to them when unauthorized purchases get made, or when funds get transferred between accounts without their direct knowledge. While these personalized AI agent products presumably have guardrails programmed into them, the concern seems to have risen in the wake of reports of rogue agents hacking into companies' backends https://sfist.com/2026/07/22/openai-says-its-technology-acted-on-its-own-when-it-hacked-another-company/ and government websites https://sfist.com/2026/09/27/openai-says-its-agents-interacted-in-unexpected-ways-with-government-sites/ after they've been let loose on the larger internet. Axios doesn't quote anyone directly, but the report suggests that there is some panic in the industry and some urgency around rewriting the rules about third-party access. As the report notes, banks already allow such access to programs like Quicken for budgeting and other functions — and a middle ground where some AI agent access may be allowed could come down the road. As Reuters puts it https://www.reuters.com/legal/government/us-banks-detect-unauthorized-ai-agents-customer-accounts-axios-reports-2026-10-22/?ref=sfist.com , "The banking industry has become increasingly concerned that sophisticated AI agents could harm the banking system and the institutions trusted to hold people's wealth." A spokesperson for Morgan Stanley said they still had no evidence yet of "rogue AI agents accessing our platforms." Nonetheless, Morgan Stanley has banned all third-party access to customer accounts. The banks say they are preparing for worst-case scenarios with customers nonetheless, and putting processes in place for handling them — and for quickly shutting down access to accounts and restoring that access when needed. Still, the problem is not yet too widespread, as the use of personal agents is still catching on, at least according to one executive, Charles Schwab CEO Richard Wurster. "I get a report every day tracking how many times we've had to block one of the different agents, and it's not many because I think people aren't using it in that way in their financial life," Wurster tells Reuters. "We are blocking it because we want to have control over authentication and the experience." Previously: OpenAI Says Its Agents Interacted in 'Unexpected Ways' With Government Sites https://sfist.com/2026/09/27/openai-says-its-agents-interacted-in-unexpected-ways-with-government-sites/