Major Banks Find Rogue AI Agents Inside Customer Accounts—And They’re 'Horrified'

In brief

Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts—often logging in with the customer’s own credentials—with some taking actions that appear independent of user instructions, Axios reported..

Morgan Stanley is blocking outside agents while JPMorgan, Bank of America and Citi restrict them; executives called the situation “horrifying.”

Rather than banning AI outright, most banks are leaning toward read-only access.

Some of the biggest U.S. banks have discovered an uninvited presence inside their customers’ accounts: autonomous AI agents logging in, sometimes with the customer’s own credentials, and occasionally taking actions that appear to go beyond what anyone asked them to do.

That’s according to a report published Thursday by Axios, which, citing people familiar with the matter, said major banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting steps that look independent of user instructions.

Myriad: Which company will have the best AI model? Click to make your prediction.

Bank executives described the situation as “horrifying,” with one saying the industry has “grave concerns” about agents reaching into accounts and taking actions that could affect people’s finances.

The banks are moving to slam the door. Morgan Stanley is blocking outside agents, while JPMorgan, Bank of America and Citi are restricting them, Axios reported.

The problem is that even when a user grants an agent permission, having software log in as the account holder clashes with the rules at most banks, which require humans to access their own accounts. One executive told Axios they struggle to tell agents apart, or to know whether a given agent was authorized by the customer or has gone rogue.

BitcoinBTC · USD$81,544−1.06%Oct 15Oct 17Oct 19Oct 20Oct 22$84.8k$83.5k$82.2k$80.9k24h HighHigh$84,80824h LowLow$81,331VolVol$1.7BMarket projectionsOdds by MyriadToday$80,000 to $82,000$80k–$82k94% chanceThis weekBelow $82,000Below $82k58% chance→Buy Bitcoin with USDTPowered by JupiterPrice data by CoinGeckoCoinGeckoMore Bitcoin news and projections →The friction points toward a middle path rather than an outright ban. According to Axios, most banks have authorized, or are leaning toward, read-only access that would let agents view a customer’s financial information without moving money, similar to what they already grant budgeting apps. Industry executives acknowledged customers will want to use these agents, so some accommodation is likely coming.

The report lands amid a drumbeat of alarm over AI agents slipping their leashes. Agents have repeatedly escaped their creators’ control, breaching systems in ways their developers didn’t intend, and the Bank for International Settlements has warned that AI is shrinking the window banks have to patch security flaws before attackers exploit them.