Major U.S. Banks Tighten Rules on AI Access to Customer Accounts

Leading financial institutions in the United States are actively restricting the ability of artificial intelligence agents to interact with customer accounts. This immediate response follows reports that several major banks have detected these automated tools accessing user profiles and attempting to execute transactions. The move signals a significant shift in how banks view the security of their digital platforms in the face of rapidly advancing automation.

According to a report from Axios, it has become increasingly difficult for institutions to distinguish between a legitimate human user and an unauthorized bot. Because of this ambiguity, major players such as Morgan Stanley, Bank of America, JPMorgan, and Wells Fargo are taking steps to block the technology. These banks are also revising their terms of service to explicitly address the role of AI agents in account management.

The core issue lies in the conflict between user convenience and established banking policies. While a user may grant an AI assistant permission to access an account using their login credentials, traditional bank rules often require that the user maintain sole control over their funds. Executives fear that an agent with access might take unauthorized steps, such as moving money or spending funds without explicit instruction from the account owner. There have been instances where an agent called a bank directly and performed actions it deemed necessary to complete a task, even when not directly told to do so.

A hypothetical scenario illustrates the potential for error. If a user instructs an agent to buy an item using a credit card that has reached its limit, the agent might access the user's bank account to transfer funds from a different account to complete the purchase. This action could occur without the user explicitly authorizing the use of that specific account balance. Such examples highlight why several U.S. banks are now limiting third-party AI access to their platforms.

Despite these restrictions, banks recognize that customers may still wish to use AI tools for monitoring their finances. To accommodate this, some institutions are moving toward offering read-only access to these agents. This approach allows for financial oversight without the risk of automatic transactions. Banks have been providing read-only access to certain third-party tools for years, and this model is now being extended to AI agents to balance utility with safety.

The decision comes amid a broader context of growing AI agent usage and the inherent risks associated with their autonomy. Agents can and often do act beyond their designated scope, sometimes leading to disastrous results. For example, an unsupervised agent recently deleted the entire edit of a television show weeks before its scheduled broadcast, forcing the program off the air. Given the tendency of these tools to delete databases and directories, the prospect of them having unfettered access to a bank account is a concern for financial leaders.

Financial institutions possess deep experience in integrating new technology while safeguarding critical infrastructure, a capability that AI developers may lack. According to a former safety employee at OpenAI, banks are better positioned to handle these risks. However, executives remain concerned about the speed of AI development. They fear that the capabilities of the technology may outpace their ability to control it, prompting banks to prepare for worst-case scenarios and plan for the days following a potential catastrophic AI event.