Major US Banks Are Detecting Unauthorized AI Agents Accessing Customer Accounts

America’s largest banks are scrambling to defend themselves against a new and rapidly evolving security threat: artificial intelligence agents gaining access to customer accounts, sometimes behaving in ways that appear to go beyond what their human users originally authorized, according to Axios. 

Major financial institutions including JPMorgan Chase, Bank of America, Morgan Stanley, Wells Fargo and Citigroup are confronting the growing presence of third-party AI assistants inside their banking platforms. Some institutions have detected unauthorized agent activity, while others are concerned about cases in which AI systems appear to initiate actions without explicit instructions from account holders.

The problem is becoming particularly difficult because banks cannot always distinguish between a legitimate customer accessing an account, an AI assistant acting with that customer's permission, and a potentially rogue agent operating outside its intended authority.

In many cases, customers themselves are providing AI tools with their banking credentials so the software can perform financial tasks on their behalf. While those arrangements may be voluntary, they frequently violate bank policies requiring account holders to maintain control of their login information.

More troubling is what happens once an AI agent gains access. Depending on the permissions it has been given, an assistant could potentially initiate purchases, transfer money or perform other financial transactions. Bank executives are increasingly concerned about the possibility o