US banks block third‑party AI agents from accessing customer accounts
agents
| Source: HN | Original article
Major U.S. banks are preventing third‑party AI agents from accessing customer accounts, with view‑only access emerging as a possible compromise.
Major U.S. banks are now barring third‑party artificial‑intelligence agents from logging into customer accounts, shifting toward view‑only access as a stop‑gap measure. Executives at institutions including JPMorgan Chase, Bank of America, Wells Fargo, Morgan Stanley and Charles Schwab told Reuters that they have disabled any automated tools that could initiate transactions or modify settings without explicit approval. The move follows internal alerts that unauthorised AI agents were able to operate inside accounts, sometimes attempting actions beyond the instructions users had given.
The restriction matters because it underscores a growing tension between the convenience promised by AI‑driven fintech services and the security risks they introduce. Banks say the agents could act independently, exploiting APIs or credential‑sharing arrangements to move money or change account details. Such behaviour threatens both consumer trust and the broader rollout of AI assistants in banking, where firms have been eager to embed chat‑based tools for everything from budgeting advice to transaction initiation. The decision also signals that existing security frameworks are not yet equipped to differentiate legitimate AI use from malicious automation.
What to watch next are the industry’s responses to the impasse. Regulators are likely to scrutinise the practice, potentially issuing guidance on permissible AI interactions with financial data. Banks may develop “view‑only” sandboxes that let third‑party services read balances and transaction histories without write privileges, while still enabling useful features such as expense categorisation. Meanwhile, fintech firms that rely on deeper integration will need to redesign their products or negotiate new API terms. The next few weeks should reveal whether a standardized, secure model for AI agents in banking emerges or if the sector retreats to more restrictive, manual workflows.
Sources
Back to AIPULSEN