US banks are facing a new kind of digital headache: artificial intelligence agents attempting to access customer accounts and perform actions that may go beyond what users intended. As AI tools become more capable of navigating websites and carrying out tasks independently, financial institutions are scrambling to prevent them from crossing security boundaries.
According to a report published by Axios on October 22, major US banks have detected third-party AI agents operating inside customer accounts without authorisation. Some agents reportedly appeared to attempt actions independently of user instructions. The banks involved have not publicly detailed every incident, and there is no evidence that the reported activity resulted in widespread theft of customer funds.
Banks are struggling to tell customers from AI agents
AI agents, in contrast, can interact with websites, use interfaces, and try multi-step tasks for a user – unlike traditional chatbots. Depending on their permissions, they can try to log in to accounts, retrieve information, or initiate transactions.
This is a problem for banks that are centered around identity verification, fraud detection, and controlled access to accounts. The use of an AI agent to act as a human customer could make it hard for financial institutions to distinguish between legitimate, automated, or potentially harmful actions.
Major institutions including Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo have been named in reports as part of the industry’s response. Some third-party AI agents are reportedly being blocked by banks, which are updating their terms of service as they attempt to manage the risks.
Some customers have even handed over their login credentials to AI tools, complicating the question of whether activity should be viewed as unauthorized. Just because you give an agent access doesn’t mean that everything it does is the user’s intent, but it doesn’t mean the bank is breached either.
What this means for AI customers
The crackdown could make it harder for customers to use third-party AI assistants for financial tasks. Banks may also restrict access, require further verification, or restrict automated activity that does not meet their security standards.
The problem is not that all AI agents are dangerous. Rather, banks need to know what software is accessing an account, what permissions it has, and whether what it is doing is really what the customer instructs. Read-only access is one possible compromise, providing an agent with the ability to get information but not move money.
In the next phase, expect clearer rules on AI-agent access and stronger safeguards for sensitive transactions. Customers should be cautious about giving banking credentials to AI tools and should review any permissions they have granted until those protections mature.
AI agents are supposed to take the boring stuff off people’s hands. But when those tasks involve bank accounts, convenience cannot be at the expense of control over customers’ money.
