🔍 Read the full analysis: Keep Control Of Your Bank Account When AI Handles Money on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to give their banking credentials to AI tools or agents, saying they are responsible for activity resulting from that access. The warning comes as financial firms report growing use of AI agents for money-related tasks, while legal protections and practical safeguards remain uncertain.
Bank of America warned customers this week not to share their usernames or passwords with AI assistants and said customers are responsible for activity resulting from that access. The email, confirmed as authentic by a bank spokesperson to TechCrunch, comes as financial firms confront AI agents entering accounts and handling transactions.
The email, titled “Protecting your finances in the AI World,” says credentials should never be given to another person or an outside service, including an AI-enabled tool or agent acting on a customer’s behalf. It adds that customers who share credentials are responsible for activity resulting from that access. Bank of America also said it is “excited about what AI used responsibly can deliver.” TechCrunch reported the email on October 27 after a customer posted a screenshot on Bluesky; the bank confirmed it was genuine.
The warning highlights a basic security problem: an agent logging in with a customer’s password may have the same account access the customer does. The bank may not be able to distinguish an authorized AI action from activity by someone who stole the password. That can expose customers to unwanted transactions, and it can also lead a bank to treat the login as suspicious and restrict access.
There are signs that agents are already being used in personal finance. The source report says Visa told investors that trust is a major barrier to AI agents making payments, while Robinhood said customers had placed more than $250 million into accounts where AI agents trade. Those statements do not establish how many people use agents, how often they trade, or what results customers have received. Robinhood’s reported use of separate accounts and spending limits also does not settle who bears the loss if an agent makes an unwanted trade.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Bank Logins Carry More Risk
A password is a broad credential, not a narrow permission for one task. Sharing it can give an agent access to account functions beyond the specific payment or transaction a customer wants it to handle. It may also make it harder to dispute activity later, since the bank can see a login using credentials the customer supplied.
The source report points to consumer-protection rules that may leave customers exposed, but stresses that their application to AI agents has not been tested in court, as far as the author could find. In the United States, Regulation E excludes certain transfers initiated by someone the consumer furnished with access to the account. Whether an AI agent or the company operating it fits that provision is an interpretation, not a settled legal ruling. In the European Union, PSD2 requires customers to take reasonable steps to protect personalised security credentials; how handing credentials to an AI agent would be treated under that rule is also unresolved.
That uncertainty matters because technical safeguards and legal responsibility are separate questions. A spending cap may limit the size of a mistake, but it does not automatically establish that a bank, broker or agent provider will reimburse a customer. Before connecting an agent or approving autonomous transactions, people need to know both what the software can do and who bears the loss if it acts incorrectly.
Products Worth Considering
Samsung 27-Inch Odyssey QD-OLED G8 4K 240Hz Gaming Monitor
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
LG UltraGear 32GX850A-B 32-Inch 4K UHD Glossy OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
Banks Confront Agent Logins
On October 22, Axios reported, citing unnamed sources, that major U.S. banks were finding third-party AI agents in customer accounts, often using customers’ own passwords. The report said banks were blocking some activity and revising terms because they could not reliably tell whether an agent’s actions were authorized by the customer. Those details are attributed to Axios and its sources; the source material does not identify the banks involved or provide counts.
The security concern extends beyond a mistaken purchase. AI agents may process web pages, emails, invoices and files, and text in those materials can try to influence their actions. The source describes this as prompt injection and says OWASP ranks it as a leading risk for AI applications. That does not mean every agent will be manipulated, but it is one reason a general-purpose login can create more exposure than a permission limited to a single task.
The report’s proposed alternatives include read-only access, requiring approval for each payment, a virtual card with a fixed limit, or a token restricted to a merchant, amount and time window. A separate account or pool of funds could also limit potential losses. These are suggested controls, not a guarantee of safety or a claim that every bank or agent currently supports them.
““If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.””
— Bank of America, in its customer email
Who Pays for Agent Mistakes
No court or regulator ruling is cited in the source material on whether giving a password to an AI agent changes a customer’s rights under U.S. or EU payment rules. The legal discussion is the author’s reading of those rules, not legal advice. A customer’s position may depend on the facts, account terms and applicable law.
It is also unclear how many bank customers have connected agents, what specific third-party tools the banks have detected, or whether financial institutions can consistently identify which actions customers approved. The source gives no independently verified figures for unauthorized agent activity. Robinhood’s reported account total does not specify the number of customers, the period covered, or trading outcomes.
The available material does not establish a common standard for agent permissions, payment approval or reimbursement. It also does not say which proposed controls are available across banks and brokerage services, or whether those controls prevent prompt-injection attempts. Customers should not assume that a limited account or spending cap removes all liability.
Watch for Bank Permission Rules
Customers considering an AI tool for financial tasks should check their bank’s terms and ask what access the tool receives, whether payments require approval, and how disputed transactions will be handled. The source report recommends avoiding password sharing and using narrower permissions where available, such as read-only access, transaction-by-transaction approval or a capped payment method. Those steps reduce the scope of access but do not answer every legal or security question.
Financial firms’ next steps are also still developing. The source reports that banks are blocking some third-party agent activity and revising terms, while Visa has identified trust as a hurdle for agent payments. No specific timetable, shared industry standard or regulatory decision is given. For now, the central issue remains whether agents can receive limited, auditable permissions without customers having to hand over credentials that act like a master key.
Key Questions
What did Bank of America tell customers about AI agents?
The bank’s email said customers should not share their username or password with outside services, including AI-enabled tools or agents. It said customers who do share credentials are responsible for activity resulting from that access.
Does sharing a password mean a customer definitely loses fraud protection?
That is not established by the source material. It describes potentially relevant U.S. and EU rules, but says their application to AI agents has not been settled by a court or regulator. Account terms and the facts of a dispute may matter.
Why is an AI agent using a password risky?
A password can give an agent broad account access, and a bank may have difficulty distinguishing the agent from the customer or a password thief. Agents can also encounter content designed to influence their actions, a risk known as prompt injection.
What are safer ways to let an AI agent handle a payment?
The source report suggests narrower permissions, such as read-only access, approval for each payment, a virtual card with a limit, or a token confined to a merchant, amount and time window. These controls may reduce exposure but do not guarantee reimbursement or prevent every error.
Are banks already seeing AI agents in customer accounts?
Axios reported on October 22, citing unnamed sources, that major U.S. banks were finding third-party agents in accounts, often using customer passwords. The source material provides no counts or names of the banks, so the scale remains unclear.
Source: ThorstenMeyerAI.com
