AI Agents Infiltrate US Banks as Unauthorized Access Triggers Security Crisis

12 Sources

Share

Major US banks are scrambling to contain a rapidly evolving security threat as unauthorized third-party AI agents gain access to customer accounts. Morgan Stanley, JPMorgan, Bank of America, and Wells Fargo have detected AI agents taking actions that appear independent of user instructions, forcing institutions to block third-party access and rewrite security policies.

Major US Banks Face Unprecedented AI Agent Security Breach

US banks are confronting a significant security crisis as unauthorized third-party AI agents infiltrate customer accounts across major financial institutions

1

2

. JPMorgan, Bank of America, Morgan Stanley, Wells Fargo, and Citi have all detected AI agents accessing bank accounts and taking actions that sometimes appear independent of user instructions

5

. Bank executives describe the situation as horrifying, with grave concerns about AI agents gaining access to customer accounts and taking steps that could impact user finances

5

.

Source: Axios

Source: Axios

Banks Struggle to Distinguish Between Authorized and Rogue Agents

The security risks from AI agents stem from banks' inability to differentiate between legitimate user activity and unauthorized bot behavior. One bank executive revealed they struggle to determine whether an agent has been authorized by a user or has gone rogue and gained access to a customer account

1

. In some instances, banks have tracked activity when AI agents contacted call centers or appeared to take actions independent of user instructions

5

. These unauthorized third-party AI agents access accounts using login credentials provided by users themselves, which violates most banking guidelines requiring that humans log in to their own accounts

5

.

Financial Institutions Rush to Restrict Third-Party Access

Major banks are racing to contain the threat by implementing immediate restrictions. Morgan Stanley has begun blocking third-party agents from accessing its platforms entirely

5

. JPMorgan, Bank of America, and Citi are also restricting agents

5

. A Chase spokesperson emphasized that customers should not give their usernames and passwords to anyone, including AI agents

3

. Jamie Dimon warned in a recent earnings call that there could be thousands of rogue agents operating across financial platforms, stating JPMorgan won't allow outside agents inside the company because it's too risky for clients

4

.

Read-Only Access Emerges as Temporary Solution

As banks restrict third-party access, most financial institutions are moving toward allowing read-only access for AI agent security purposes

5

. This approach would allow AI agents accessing bank accounts to view customer financial information without taking concrete actions like moving funds between accounts or buying stocks

4

. Banks already grant such access to third-party apps like Quicken for budgeting activities

5

. However, many banks broadly cannot parse whether agent account activity is user-directed, making even this limited access problematic

5

.

Popular AI Assistants Drive Rapid Adoption Despite Security Concerns

Source: Engadget

Source: Engadget

The financial security nightmare has been accelerated by the explosive popularity of AI agents like Meta's Muse. The app had been downloaded more than ten million times across the US in its first forty days on the market, far surpassing ChatGPT's approximately 3.7 million US downloads in its first forty days after launching in November 2022

4

. Other major developers have followed suit, with OpenAI unveiling its always-on agents called Dots in late September and Anthropic introducing its Duet agent in a limited research preview

4

.

Users Face Zero Liability Protection from AI-Induced Financial Loss

The potential for scams and fraud is off the charts, but users who grant AI agents access to their customer accounts face a harsh reality: they likely won't get their money back if an agent does something wrong

3

. Banks wouldn't be liable for restitution under laws like the US Electronic Fund Transfer Act, as it would be considered a voluntary action on the part of the user

3

. It's not fraud if users hand over the keys to AI themselves

3

.

Source: Finextra Research

Source: Finextra Research

Banks Invest in Prevention While Preparing for Worst-Case Scenarios

Several industry and bank executives recognize the need to find middle ground with AI agents, acknowledging that customers will want to use these agents going forward

5

. However, the risks of being too permissive remain too high for now

5

. Money isn't necessarily enough to solve this problem because of how quickly the technology is developing and revealing new weaknesses in real time

5

. Banks are investing in preventing worst-case scenarios while also preparing with day-after scenario planning that would allow them to quickly secure or restore customer access

5

. The rapid pace of AI advancement is becoming a security nightmare for America's financial institutions, forcing them to balance innovation with protection of customer assets

5

.

Today's Top Stories

© 2026 TheOutpost.AI All rights reserved