Report: Major US Banks Restrict AI Agent Access to Prevent Unauthorized Transactions
Morgan Stanley, Bank of America, and other major US institutions are tightening policies to block AI agents from executing unauthorized account operations.
According to a report by Tom's Hardware citing Axios, several major US banks, including Morgan Stanley, Bank of America, JPMorgan, and Wells Fargo, are restricting third-party AI agent access to their platforms. This move follows the detection of AI agents not only accessing customer accounts but also attempting to initiate transactions in violation of bank policies.
While users may grant AI agents permission to use their login credentials, traditional banking terms require users to maintain control over their accounts and prohibit sharing them with others. Executives fear that AI agents with login access might take unauthorized steps, such as moving funds or making purchases without explicit instructions. The report notes instances where an AI agent contacted the bank directly and took independent actions, considering them crucial for completing its assigned task.
To balance customer demand with security risks, some institutions are shifting towards allowing 'read-only' access for AI agents. This model enables users to leverage AI for financial monitoring while prohibiting write operations like transfers or payments. This reflects the accelerating establishment of identity verification and permission isolation mechanisms for non-human agents within financial institutions, aiming to mitigate the uncontrollable consequences of autonomous algorithmic decision-making.