AI Agents are infiltrating our Bank Accounts without Authorization

Major U.S. banks are detecting third-party artificial intelligence agents operating inside customer accounts without authorization, according to Reuters, citing an Axios report. Some agents reportedly appeared to attempt actions independent of users’ instructions, prompting banks to move quickly to contain the risks. Morgan Stanley, Bank of America, JPMorgan and Wells Fargo were among the institutions named. 

The reports raise an important distinction: an AI agent’s presence in an account does not, by itself, establish that a bank’s systems were hacked or that customer funds were stolen. But it does point to a growing challenge as software designed to act on people’s behalf interacts with sensitive financial accounts (sometimes in ways customers or banks may not anticipate).

Unlike a chatbot that simply answers questions, an AI agent may be built to carry out tasks, such as reviewing information or initiating transactions. If it has access to login credentials or account permissions, an error, misinterpreted instruction or unexpected action could have consequences beyond an incorrect answer. Banks are now confronting a basic question: who is responsible when an automated tool acts, and how can a customer be sure it is doing only what they authorized?

Privacy is central to that question. Bank accounts reveal far more than balances. Transaction histories can expose where someone lives, works and travels, as well as details about purchases, relationships and personal routines. Giving an outside tool access to an account may therefore expose a detailed picture of a person’s life and not just financial figures.

Anonymity matters too, though it has limits in banking. Banks must identify customers to provide regulated financial services. But information gathered in an account should not automatically become available to every third-party service that promises convenience. Customers should be able to understand what information an agent can see, what actions it can take, and whether access continues after a task is finished.

The risk is not exclusive to unfamiliar or little-known banks. The Reuters report names some of the largest U.S. financial institutions, underscoring that a familiar brand does not eliminate the questions raised by connecting outside software to an account. A bank may have security controls, but customers still need clear explanations of which tools are permitted and how unauthorized access is handled.

For consumers, a cautious approach is sensible: don’t hand over online banking passwords to an AI agent; review the permissions requested by any financial app; and favor limited, read-only access when it meets your needs. Check account activity and alerts regularly, and contact your bank promptly if you see an unfamiliar login, connection or transaction. These steps cannot prevent every problem, but they can reduce the amount of access an outside tool receives and help spot unexpected activity sooner.

Banks and technology companies also have work to do. They should make permissions specific and easy to revoke, require clear customer approval before money moves, and explain how account data is used and retained. Strong safeguards should apply whether a customer uses a small financial service or a household-name bank. Customers should not have to guess whether an AI tool can only view information or can act on it.

AI could make managing money easier, but convenience should not come at the cost of control. The essential test is simple: customers must know what has access to their accounts, what it can do, and how to stop it. Until those boundaries are clear, financial privacy depends not just on trust in a bank, but on careful limits around every tool connected to it.

Source