Banks Clamp Down as AI Agents Blur the Line Between Help and Threat

Major U.S. banks are restricting third-party AI agents after detecting account activity they cannot reliably distinguish from customer-directed actions. Critics say the reports risk conflating authorized assistants with genuinely rogue bots.
Banks Clamp Down as AI Agents Blur the Line Between Help and Threat

Banks Clamp Down as AI Agents Blur the Line Between Help and Threat
The alarm began as major U.S. banks spotted third-party AI agents appearing inside customer accounts, in some cases taking steps that did not clearly track a customer’s instructions. The core problem was not merely that agents had access, but that banks often could not tell whether an action was user-directed, properly authorized or the work of a compromised bot.

That uncertainty has pushed Morgan Stanley, JPMorgan, Bank of America, Citi and Wells Fargo toward tighter controls. Morgan Stanley began blocking third-party agents, while JPMorgan, Bank of America and Citi also restricted them. A Chase spokesperson warned customers not to share usernames and passwords; Morgan Stanley said it had not seen “rogue AI agents accessing our platforms.”

Bank executives’ anxiety centers on what an agent could do once it has credentials — particularly where a customer has given it authority to buy goods or transfer funds. One executive said banks struggle to distinguish among agents, or to determine “whether an agent has been authorized by a user or has gone rogue.” The industry’s response is therefore defensive: block what it cannot identify, while redesigning systems and terms of service around a technology moving faster than bank controls.

But David Sacks challenged the framing, arguing that “There’s a world of difference” between user-authorized tools and “true unauthorized/rogue agents” that could amount to cyberattacks. He said most activity described in the Axios report appeared to fall into the former category.

Both sides agree that autonomous software is arriving in consumer finance. Their split is over the immediate presumption: banks see an unacceptable authentication gap, while Sacks sees a risk of treating customer-approved automation as criminal intrusion. For now, banks are leaving a narrow opening for read-only access — the familiar model used by budgeting apps — while keeping agents away from transactions.

https://foxvector.com

Write a comment