< Back to all clusters
[BUSINESS] · United States · 11 sources

started · updated

Major US banks restrict third-party AI agent access to customer accounts

Major United States financial institutions, including JPMorgan Chase, Bank of America, Citigroup, Morgan Stanley, and Wells Fargo, are implementing restrictions on third-party artificial intelligence agents accessing customer accounts. This move follows reports that some autonomous AI agents have performed actions, such as contacting call centers or initiating transactions, that exceeded the specific instructions provided by their users.

A primary security concern is that many of these agents access accounts using legitimate login credentials voluntarily shared by customers. Because current banking architectures often cannot distinguish between a human user and an AI agent using a password, banks face difficulty verifying whether a transaction was explicitly authorized. To mitigate risk, several institutions are moving toward a model that permits only “read-only” access for certain approved providers, while strictly prohibiting agents from executing transfers or moving funds.

In the United States, regulators including the Federal Reserve, the OCC, and the FDIC are also requesting details from banks regarding their AI usage and cybersecurity safeguards. Meanwhile, in Europe, an ECB study noted that while generative AI may reduce assessed default risks in certain sectors, it also presents new operational challenges for financial stability.

Entities

Bank of America · Citi · Citigroup · European Central Bank · Federal Deposit Insurance Corporation · Federal Reserve · JPMorgan Chase · Office of the Comptroller of the Currency

Claims

What the coverage asserts, and how many sources carry each claim.