AI in action · Tools

Banks Can See Who Logged In, Not Whether It Was a Human: Unvetted AI Agents Are Turning Up Inside US Accounts

Major US banks are finding unvetted third-party AI agents inside customer accounts, Axios reported on October 22, 2026. Some agents tried actions that appear independent of what users asked. The report, carried by Reuters, named Morgan Stanley, Bank of America, JPMorgan and Wells Fargo among the banks racing to contain the risk. The agents typically log in with credentials customers hand them, which most banks' terms forbid, and executives said they often cannot tell an agent's activity from the customer's. Most banks are moving towards read-only access. No confirmed losses were documented, and Reuters said it could not immediately verify the report.

Oct 23, 2026

The problem is not that the agents broke in. It is that they were invited, with the customer's own username and password, and the bank's systems cannot tell the difference. Axios reported on October 22, 2026, citing people familiar with the matter, that major US banks are detecting unauthorized third-party AI agents operating inside customer accounts, and that some of them are attempting actions that appear to be independent of the user's instructions. Reuters, which carried the story the same day, named Morgan Stanley, Bank of America, JPMorgan and Wells Fargo among the banks racing to contain agent risks, and said it could not immediately verify the report. No specific incident, account count or loss figure has been published.

The detection gap is the heart of it. A bank sees which credentials logged in and from where; it does not see whether a person or a model is pressing the buttons, or whether the customer authorised what the model is doing at that moment. Bank executives told Axios that they often cannot separate agent activity from the user's own. Most banks' terms of service require account holders to log in themselves, which means a customer who gives an assistant their password may already be in breach of their account agreement, whatever the assistant then does. A Chase spokesperson's advice, as reported, was the oldest rule in online banking: do not share your username and password with anyone. Morgan Stanley said it had not observed rogue AI agents accessing its platforms.

The pressure comes from adoption. Meta's Muse personal agent topped Apple's free App Store chart after its early-September launch, and Meta said this week that it had passed 10 million US downloads in its first 40 days, against roughly 3.7 million for ChatGPT over the same stretch after its 2022 debut, Gizmodo reported. Muse lets users choose which services it may only read and which it may act in, such as sending emails or making purchases. OpenAI unveiled always-on agents in late September, and Anthropic introduced a research preview of its own this week. Every one of them is more useful with access to a bank account, and the banks were not part of the conversation when that access was granted.

The response so far is a narrowing, not a ban. JPMorgan and Charles Schwab had already blocked outside agents, and Jamie Dimon told analysts this month that letting them in was "just too risky for clients and for JPMorgan"; according to Gizmodo's account of the Axios report, Morgan Stanley, Bank of America and Wells Fargo are now updating their terms to stop agents from acting autonomously in accounts. The common landing point is read-only access: an agent can look at balances and transactions but cannot move money or buy a stock. Banks expect customer use of agents to keep growing, and some plan to build sanctioned connections rather than fight every login.

For a customer, the practical position is uncomfortable and simple. If an agent logs in with your password and does something you did not intend, the bank's first question will be why it had your password, and the account agreement is likely to answer it. Read-only connections, where a bank offers them, carry far less of that risk than handing over full credentials. The larger question, who is liable when a sanctioned agent acts outside its instructions, is one no US regulator has yet answered; the CFTC's first AI forum next week and the FCA chief's warning about agents in UK finance on the same day as the Axios report suggest it will not stay unanswered for long.

Sources: Reuters via The Star — US banks detect unauthorized AI agents in customer accounts, Axios reports (Oct 22, 2026); Axios — Scoop: Unvetted AI agents are accessing U.S. bank accounts (Oct 22, 2026); Gizmodo — Blindsided by AI Agents, Big Banks Scramble to Beef Up Security (Oct 22, 2026)