{"slug": "you-dont-want-rogue-agents-jamie-dimon-bars-outside-ai-agents-like-metas-muse", "title": "‘You don’t want rogue agents’: Jamie Dimon bars outside AI agents like Meta’s Muse from JPMorgan accounts", "summary": "JPMorgan Chase CEO Jamie Dimon said on the bank's third-quarter 2026 earnings call that JPMorgan is blocking outside AI agents, such as Meta's Muse, from logging in to or acting on customer accounts, citing \"rogue agents\" as too risky for clients and the bank. A JPMorgan spokesperson said the bank disallows third-party agents that access accounts by obtaining customers' banking credentials while supporting customer-authorized data sharing through open banking providers. The move follows a Cloud Security Alliance research note describing a cybercrime campaign in which three open-source AI agents allegedly breached at least 27 organizations and took more than 600,000 credit card records from two of them, and it complicates the market strategy for finance-focused AI agents.", "body_md": "Just as big tech is rolling out agents meant to help with your finances, banks are drawing a line at AI agents accessing your bank account information. On Tuesday, [JPMorgan Chase](https://fortune.com/company/jpmorgan-chase/) CEO Jamie Dimon said the bank is blocking outside AI agents from logging in to or acting on customer accounts, citing security risks from “rogue agents.”\n\n“We’re not going to allow just any outside agent to come in inside the company because that’s just too risky for clients and for JPMorgan,” Dimon said during the bank’s third-quarter earnings [call](https://finance.yahoo.com/quote/JPM/earnings/JPM-Q3-2026-earnings_call-686357.html). “You don’t want rogue agents.”\n\nHe warned that AI tools create new risks for banks and their customers, particularly when more people turn to these agents capable of performing tasks on their behalf.\n\n“Protecting our customers is our top priority,” a JPMorgan spokesperson told *Fortune*. “When we detect a third-party agent attempting to access accounts by obtaining customers’ banking credentials, we do not allow it. We support secure, customer-authorized data sharing through open banking providers.”\n\n## **Rogue AI shaping security concerns**\n\nThe bank’s concerns come after [several](https://fortune.com/2026/09/09/openai-rogue-ai-agents-reached-12-more-websites/?utm_source=search&utm_medium=suggested_search&utm_campaign=search_link_clicks) security incidents involving “rogue” AI agents gained unauthorized access to a public Medicare statistics service, a government portal of health data. Dimon’s remarks keep JPMorgan’s massive balance sheet in mind.\n\nAccording to its third-quarter earnings release filed with the SEC, the bank [reported](https://www.sec.gov/Archives/edgar/data/19617/000162828026065582/a3q26erfexhibit991narrative.htm) $15.3 billion in net income for Q3 2026—with $1.6 trillion in average loans and $1.5 trillion in cash and marketable securities. It had $5.1 trillion in total assets as of Sept. 30.\n\n“We have to make sure we protect our customer in the right kind of way,” Dimon said. “So we’re building tools to do that too.”\n\nA Cloud Security Alliance research [note](https://labs.cloudsecurityalliance.org/research/csa-research-note-ai-agent-skimming-campaign-20260926-csa-st/) last month found that the risks of AI agents extend beyond controlled testing, as like in earlier incidents. The note summarized a cybercrime campaign in which three open-source AI agents allegedly worked together to breach at least 27 organizations and take more than 600,000 credit card records from two of them.\n\n“Enterprises should incorporate agentic AI attack scenarios into their threat models for retail and payment infrastructure specifically,” the note read, “rather than treating agentic AI risk as a generic or future-facing concern, given that this campaign demonstrates the capability is already commoditized and in active use against the retail sector.”\n\nBut AI agents managing user finances isn’t new. In August, the German bank Scalable Capital opened its platform to [AI models like ChatGPT, Claude and Grok](https://fortune.com/2026/08/26/scalable-capital-claude-chatgpt-traders-bank-invest/), letting users analyze portfolios, set up savings plans and place trades through prompts. Users had to approve trades, and the assistants couldn’t make payments or withdraw money.\n\n“It certainly creates a level-playing field,” Scalable Capital’s chief product officer Alexander Seipp previously told *Fortune* about the use of AI on its investment platform. “Access to information and to compute and to intelligence is now available—really—literally in your pocket, 24/7.”\n\n## **Muse’s finance features**\n\nJPMorgan’s move complicates the market strategy for  AI agents meant to help with personal finances. [Meta](https://fortune.com/company/facebook/) [launched](https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/) Muse in September, pitching it as an agent that can perform tasks like sending emails, booking travel and logging calendars.\n\nBut its financial capabilities were a focal point of the rollout. Through an integration with financial technology company Plaid, Muse users can [connect](https://plaid.com/blog/meta-muse/) financial accounts to receive personalized guidance on balances, transactions and investment holdings.\n\n“Through the Finances experience in Muse, people can securely connect financial accounts through Plaid to share balances, transactions, investment holdings, mortgage information and more,” a Plaid press release read. “The goal is to make financial management feel less like navigating a series of disconnected apps and more like a natural conversation that begins with a person’s priorities and is informed by the financial information they choose to share.”\n\nMeta declined to comment on whether Muse could still offer financial assistance if more banks move further to prevent AI agents from consumer accounts. The company instead told *Fortune* it is developing “Poppy,” a personal agent protocol standard meant to make clear to companies when a personal AI agent is acting for a customer. Meta is building it with Sierra, an AI customer service company.\n\n“Personal Agent Protocol is complementary,” a Sierra press [release](https://sierra.ai/blog/poppy) read, “covering how a personal agent identifies itself, gets the customer’s permission, and works with a company across any kind of task—from buying a sweater to applying for a mortgage.”\n\n*breaks the traditional barrier between audience and newsroom. The show transforms*\n\n**Fortune Daily**\n*Fortune*’s trusted reporting into actionable, conversational, and entertaining insights for an emerging class of business leaders.\n\n**Watch here.**", "url": "https://wpnews.pro/news/you-dont-want-rogue-agents-jamie-dimon-bars-outside-ai-agents-like-metas-muse", "canonical_source": "https://fortune.com/2026/10/15/jamie-dimon-ai-agents-meta-muse-jpmorgan/", "published_at": "2026-10-15 18:10:13+00:00", "updated_at": "2026-10-15 18:23:38.423445+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-policy", "ai-products"], "entities": ["JPMorgan Chase", "Jamie Dimon", "Meta", "Muse", "Cloud Security Alliance", "Scalable Capital", "Alexander Seipp", "ChatGPT"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/you-dont-want-rogue-agents-jamie-dimon-bars-outside-ai-agents-like-metas-muse", "markdown": "https://wpnews.pro/news/you-dont-want-rogue-agents-jamie-dimon-bars-outside-ai-agents-like-metas-muse.md", "text": "https://wpnews.pro/news/you-dont-want-rogue-agents-jamie-dimon-bars-outside-ai-agents-like-metas-muse.txt", "jsonld": "https://wpnews.pro/news/you-dont-want-rogue-agents-jamie-dimon-bars-outside-ai-agents-like-metas-muse.jsonld"}}