AI Agent News/stories/major-us-banks-block-ai-agents-that-log-in-with-customer-credentials.md

Identity

Major US banks block AI agents that log in with customer credentials

Several large US banks, including Morgan Stanley, JPMorgan, Bank of America and Wells Fargo, are restricting outside AI agents that use customers' login details, according to Axios. Most want agents limited to read-only access, and some block them entirely.

Source: the-decoder.com/major-us-banks-are-locking-out-ai-agents-that-log-in-with-customer-credentials

AI agents are reportedly using customer-provided credentials to reach bank accounts without the bank's approval. That breaks bank policies that require account holders to log in personally. Axios reports that some agents appear to act without direct instructions from users.

Morgan Stanley already blocks AI agents entirely, and JPMorgan, Bank of America and Citi are doing the same, according to the report. Morgan Stanley said it has not seen any rogue AI agents on its platforms. The banks say customers want to use agents, but that the security risks are too high for now.

Many banks cannot tell whether an agent is acting for a user or accessing an account on its own. Users can connect agents through a browser using tools such as Computer Use or the open-source OpenClaw, and blocking that on the provider side will be hard. OpenAI has launched a ChatGPT service for financial tasks in the US with read-only access to financial data.

Why it matters if you build agents

Agents that log in with a user's bank credentials may be cut off or limited to read-only access, so anything that needs to move money should not assume that path will keep working. Developers should expect banks to require their own authorization flows and to tell user-driven sessions apart from autonomous ones. Read-only access through a provider's own financial product is the safer design to plan around.

Get stories like this every weekday

One short email with the day's agent tooling news.

Subscribe