Major US banks detect unauthorized third-party AI agents in customer accounts

Linking a bank account to a third-party app by handing over a username and password is the same credential-sharing model that aggregators like Mint and Plaid used before banks built dedicated APIs. AI assistants that promise to check balances or move money have revived that pattern, logging in as if they were the customer. Axios reporting now shows banks treating this as a security gap rather than a convenience feature, since the bank has no way to vet what the agent does once inside.

Customers who gave an AI agent their banking password to check a balance or schedule a transfer will find that access cut off, forcing them back to manual logins or bank-approved integrations. Some agents had already begun contacting bank call centers on a customer's behalf, actions no one explicitly authorized. Banks gain back control over who touches an account, but customers lose a workflow they had adopted, and both sides now face an open question over who is liable if an agent moves money incorrectly.

Banks describing themselves as 'horrified' at finding bots inside accounts exposes a deeper mismatch: AI agents built for autonomy need standing credentials to act, but banking security assumes a single, accountable human is logging in. That is the same custody tension crypto has argued over for years, where convenience pushes toward handing control to a third party and security pushes back toward keeping keys, or passwords, to yourself. Neither side is wrong, which is why the standoff is likely to produce new rules rather than a quick fix. (per decrypt.co)

The near-term signal to watch is whether Morgan Stanley, JPMorgan, Bank of America and Citi move from blocking unauthorized logins to publishing sanctioned APIs or authentication standards that let AI agents act with limited, auditable permissions. If banks only block without offering an alternative, customers will keep sharing passwords informally; if they build a vetted access layer, liability for agent-driven transactions becomes easier to assign and enforce. (per cryptobriefing.com)