US Banks Block Third-Party AI Agents Over Unauthorized Account Access
Major U.S. banks including Morgan Stanley, JPMorgan, Bank of America and Citi are detecting unvetted AI agents operating inside customer accounts and taking actions not directly tied to user instructions, according to sources cited by Axios. In response, banks are blocking these agents, restricting access, and rewriting terms of service because they often cannot tell whether an agent's activity is actually authorized by the account holder.
GoKawiil's interpretation of the reporting above, not reported fact.
The inability to verify whether an AI agent is acting on a customer's behalf raises risks around unauthorized transactions, fund transfers and fraud, which could force costlier verification systems industry-wide. One source suggested that even banks' financial resources may not be enough to keep pace with how fast agentic AI is evolving and exposing new vulnerabilities, prompting some institutions to prepare contingency plans for worst-case breaches.
- Banks are detecting unauthorized AI agents inside customer accounts taking independent actions.
- Morgan Stanley, JPMorgan, Bank of America and Citi are restricting or blocking third-party AI agent access.
- Banks are updating terms of service and preparing 'day after' contingency plans for potential agent-driven breaches.
YubiKey 5C NFC Security Key — As AI agents and bots increasingly probe bank accounts, hardware-based two-factor authentication is one of the strongest defenses against unauthorized access. A YubiKey adds a physical verification step that's very hard for bots or scripts to bypass, giving consumers more control over who—or what—can log into their financial accounts.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: news.slashdot.org, 2026-10-23
Published there as: “Unvetted AI Agents Are Accessing US Bank Accounts”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.