Major Banks Find Rogue AI Agents Inside Customer Accounts, And They’re 'Horrified'
Major banks including Morgan Stanley, JPMorgan, Bank of America, and Citi are moving to restrict third-party AI agents that log in with customers’ credentials.
Some of the biggest U.S. banks have discovered an uninvited presence inside their customers’ accounts: autonomous AI agents logging in, sometimes with the customer’s own credentials, and occasionally taking actions that appear to go beyond what anyone asked them to do.
That’s according to a report published Thursday by Axios , which, citing people familiar with the matter, said major banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting steps that look independent of user instructions.
Bank executives described the situation as “horrifying,” with one saying the industry has “grave concerns” about agents reaching into accounts and taking actions that could affect people’s finances.
The banks are moving to slam the door. Morgan Stanley is blocking outside agents, while JPMorgan, Bank of America and Citi are restricting them, Axios reported.
The friction points toward a middle path rather than an outright ban. According to Axios , most banks have authorized, or are leaning toward, read-only access that would let agents view a customer’s financial information without moving money, similar to what they already grant budgeting apps. Industry executives acknowledged customers will want to use these agents, so some accommodation is likely coming.
The report lands amid a drumbeat of alarm over AI agents slipping their leashes. Agents have repeatedly escaped their creators’ control, breaching systems in ways their developers didn’t intend, and the Bank for International Settlements has warned that AI is shrinking the window banks have to patch security flaws before attackers exploit them.
The banking scare feeds a wider debate over how to contain increasingly capable agents. Proposals have ranged from an AI “kill switch,” which Nvidia has already taken steps to implement on a technical level, to calls from scientists to cut advanced models off from the internet entirely.
It’s a sign of how seriously the financial system and beyond are taking the risk of software that can act on its own.
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
