US Banks Detect Unauthorized AI Agents Inside Customer Accounts

Major US banks are detecting unauthorized third-party AI agents operating inside customer accounts, and some of the agents have tried to take actions that appear independent of what users asked for, Axios reported on Thursday, citing people familiar with the matter. Reuters relayed the report. Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and others are racing to contain the risks, the report said.

The central problem is that banks can't always tell who is in control. Many banks are broadly unable to determine whether an agent's account activity is directed by the user, and one executive told Axios they struggle to tell agents apart, or to tell whether an agent was authorized by the user or went rogue.

In general, these are cases where an agent or AI assistant gets into a customer's account using that customer's permission and login credentials. In some cases, the agents even contacted bank call centers.

The banks are not banning agents outright. Most have authorized, or are moving toward, read-only access, which would let agents see customer financial information without taking action, the same kind of access already given to budgeting apps like Quicken. Citi says it does not allow third-party AI agents or assistants to log into customer accounts or transact on its digital banking platforms, though it permits some read-only access through approved open-banking providers.

Bank leaders have been making the case publicly. On JPMorgan's October 15 earnings call, Chief Executive Jamie Dimon said attempts by agents to transact inside customer accounts are "incredibly unsafe" and "not going to happen." Charles Schwab CEO Rick Wurster said the brokerage blocks unauthorized AI agents a double-digit number of times every week, and Bank of America CEO Brian Moynihan said a human should stay in the loop to approve money leaving an account.

Liability is unsettled. US rules limit consumer liability for qualifying unauthorized electronic transfers, but how those rules apply to autonomous AI agents remains uncertain. Wells Fargo's updated online access agreement, taking effect November 24, 2026, says customers may be responsible for transactions started by agents they authorize, including unintended actions or actions beyond their instructions, subject to applicable law, and lets the bank restrict or suspend an agent's access.

The report did not name which AI agents were involved or how many accounts were affected.

The reports come as AI companies push agents deeper into personal finance. Anthropic's new Claude Duet app, launched the same week, blocks moving money between accounts even with user approval, and banks were among the websites blocking AI agents in October, as AI Briefing News has reported.