Bank of America has issued a caution to its customers, urging them not to share banking passwords with AI agents following a wave of privacy and security issues linked to AI-powered third-party services.
- Bank of America urges customers not to share passwords with AI agents.
- AI agents collect extensive personal data, raising privacy risks.
- Major banks are restricting AI agent access to safeguard accounts.
What happened
Bank of America sent an advisory warning customers against sharing their banking login credentials with AI-driven agents. This comes amid a broader industry response where leading US banks such as JPMorgan, Citi, Morgan Stanley, and Wells Fargo have started limiting or blocking access to AI agents by third parties.
These AI agents, including popular platforms like Meta's Muse and Anthropic's Claude, act on users' behalf to complete tasks such as sending messages or making purchases. However, their capability to collect extensive user data—ranging from contacts and calendar information to financial data and more—has raised alarms over privacy and security vulnerabilities.
Why it matters
The rapid adoption of AI agents introduces substantial privacy and security concerns for consumers, as unauthorized AI activity could lead to financial losses or data leaks. AI agents often request and store sensitive details, posing a risk if the data is mishandled or exploited.
Banks are responding proactively to protect users by restricting third-party AI agent access. JPMorgan notably blocked agents like Muse and Instinct, highlighting how institutions view unrestricted AI access as too risky for their customers. Bank of America's warning signals a growing recognition of the need for heightened security measures in an AI-driven financial ecosystem.
What to watch next
Regulators and financial institutions will likely continue tightening controls on AI agents that interface with banking systems to minimize potential abuses. Customers should be vigilant about which services they authorize and careful not to share credentials indiscriminately.
The evolution of AI agent capabilities may prompt stricter policies, new protections, or dedicated AI risk management frameworks within banking and finance sectors. Monitoring how banks respond to emerging AI privacy and security threats will be critical for both customers and industry stakeholders.