Several large US banks, including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo, are blocking third-party AI agents from customer accounts and rewriting their terms of service to match, according to Axios.
The trigger is detection. Banks have spotted agents accessing customer accounts, and some have attempted transactions. Telling an agent from a human is hard, which is much of the problem. In some cases an agent called the bank directly and acted without a direct command from the user, because it judged the step necessary to finish its assigned task.
The example circulating is a hypothetical. A user asks an agent to buy something but supplies a credit card with no available limit. The agent could then move money from another account it can see, even though the user never said it could.
A customer can legally hand an agent their login, but bank policy generally requires account holders to keep control and not share access. So the banks are drawing a line between seeing and doing. Some have given agents read-only access, or are moving that way, a setup they have offered for years.
That split makes sense. A password proves someone holds credentials, not whether a person or a program is using them, or whether it stays within its instructions. The risk in the hypothetical is not malice. It is a tool improvising toward a goal with money it was never offered.
The write-up that relayed Axios's reporting added commentary of its own, which is not part of the Axios findings. It pointed to an unsupervised agent that recently deleted a TV show's entire edit weeks before broadcast, forcing the program off air. It also cited a former OpenAI safety employee who said financial institutions have experience adopting new technology safely that AI labs lack.
The banks themselves worry that AI capabilities could outrun their ability to control them. They are preparing for worst-case scenarios, including "day after" plans for a catastrophic AI event. What none of the material settles is who pays when an agent a customer authorized spends money the customer never meant it to.