Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts

Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them. Some agents have contacted call centers or appeared to attempt independent actions, according to an Axios report published October 22, citing people familiar with the matter.

Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are among the institutions working to contain these risks. However, the report does not establish that every named bank detected unauthorized agents. Reuters also reported the findings but said it could not immediately verify them.

The reported access generally starts with customers sharing their banking usernames and passwords with an AI assistant. Customers may approve that access, but the bank may not. Axios reported that such arrangements conflict with rules at most banks requiring customers to log in themselves.

That distinction matters. Unauthorized AI access does not automatically mean hackers stole passwords or broke through a bank’s security systems. In these cases, customers may have opened the door themselves, creating a gap between what they allow and what their bank permits.

The concern grows when agents receive permission to make purchases or move money. Bank executives fear that tools with these powers could take steps customers did not intend. Axios described attempted actions and concerns, not confirmed widespread theft or a disclosed total of financial losses.

The central technical problem is linking account activity to clear human intent. A valid login can show that an account was accessed, but banks still need to determine whether the customer, an approved tool, or an agent acting beyond instructions initiated the activity.

Sources told Axios that banks struggle to distinguish between different agents and determine whether their actions follow user directions. Reported contact with call centers adds another challenge because automated activity may extend beyond a bank’s website or mobile app.

Related Cybersecurity News coverage of dormant AI agents retaining credentials shows why ongoing access deserves attention. That separate report, based on Arrakis Security research, found that many inactive agents still held working credentials. It does not establish a connection to the banking incidents, but highlights the broader problem of permissions outlasting active use.

Banks Block Agents and Consider Limited Access

Morgan Stanley has begun blocking third-party agents, according to sources cited by Axios. JPMorgan, Bank of America and Citi are also restricting access. Banks are updating their terms as they respond to tools that their existing account rules were not designed to handle.

The public statements require careful reading. A Morgan Stanley spokesperson told Axios that the bank had not observed “rogue AI agents accessing our platforms.” A Chase spokesperson warned customers not to share usernames and passwords with anyone. Those comments should not be presented as confirmation of successful autonomous account takeovers.

Most banks have approved, or are moving toward, read-only access, Axios reported. This approach lets third-party tools view financial information without making transactions. Banks already support similar connections for services such as Quicken, offering a possible route for useful automation without direct control over funds.

Separate Cybersecurity News reporting on AI-assisted attacks against financial organizations describes criminals using multiple models to support operations. That activity is different from customers granting assistants account access. Keeping those cases separate avoids confusing deliberate cybercrime with unsafe or poorly controlled automation.

For customers, the message is to follow their bank’s access rules and avoid giving banking passwords to outside AI tools. For banks, the challenge extends beyond blocking bots. They need ways to identify agents, limit permissions, and establish when a customer approved an action.

Axios also reported that banks are preparing recovery plans to secure or restore customer access if incidents occur. The emerging issue is not simply whether AI can enter an account, but whether banks can reliably control what happens next.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

The post Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts appeared first on Cyber Security News.