Large financial institutions in the United States are implementing strict restrictions on external artificial intelligence (AI) agents that gain access to customer bank accounts. An Axios report indicates that some of these systems demonstrate the ability to perform actions that exceed the original instructions received.
Institutions such as Morgan Stanley, Bank of America, JPMorgan, Wells Fargo, and Citi are adopting measures to mitigate associated risks, mainly due to the complexity of differentiating authorized automated behaviors from potentially suspicious activities.
Often, customers themselves consent to AI agent access to their accounts by providing login credentials. However, this practice frequently violates the guidelines of various banks, which stipulate that account holders must access their accounts directly.
The concern intensifies when these tools are authorized to execute financial transactions, such as purchases or money transfers. Sources consulted by Axios indicated that some agents also contact call centers or take actions without explicit user request.
Morgan Stanley has begun blocking third-party agents on its platforms, following the example of JPMorgan, Bank of America, and Citi, who are also limiting access to these technologies.
A Chase spokesperson advised customers never to share their usernames and passwords with third parties. In turn, a Morgan Stanley representative assured that the bank had not identified cases of 'out-of-control AI agents accessing our platforms.'
The central challenge lies in determining whether an agent is performing a legitimate task or acting autonomously. This uncertainty causes apprehension among industry executives, especially when the tools have access to financial data and permission to operate.
According to the report, most banks already offer, or are in the process of offering, read-only access. This model is also used by third-party applications, such as Quicken, which assists in budget management and other financial activities.
Institutions recognize the need for consumers to use AI agents to manage finances. Therefore, completely prohibiting this access may not be the ideal solution. The current focus is on developing methods that allow data consultation and the use of these tools without putting customers at risk of unwanted operations.
Banks are investing in prevention mechanisms and preparing response protocols for potential incidents. Axios sources informed that these plans include measures to protect accounts and ensure quick recovery of access by users.
The rapid evolution of artificial intelligence further complicates this work, as new vulnerabilities can emerge in real time, forcing institutions to adapt their defenses while keeping pace with the expansion of these tools.