🔍 Read the full analysis: AI Agents And Banking: Protect Your Login While Delegating Tasks on ThorstenMeyerAI.com
Get audio and creator gear delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America warned customers not to share banking usernames and passwords with AI tools, saying customers are responsible for activity resulting from access they provide. The warning comes as financial firms confront AI agents operating in accounts and weigh safer ways to authorize specific tasks. How existing consumer protections apply to AI agents has not been tested in court, according to the source report.
Bank of America warned customers this week not to give their banking usernames and passwords to AI tools or agents, saying customers are responsible for activity resulting from access they provide. The warning arrives as banks and financial companies face a practical problem: an agent using a customer’s credentials can appear to the bank as that customer, while the legal and financial consequences of an agent’s actions remain unsettled.
The email, titled “Protecting your finances in the AI World,” was posted by a customer on Bluesky and reported by TechCrunch on October 27. Bank of America confirmed to TechCrunch that the email was authentic. It says login details should not be shared with another person or provided to an outside service, including an AI-enabled tool or agent acting on the customer’s behalf. It also says customers who share credentials are responsible for activity resulting from that access.
The bank’s message does not mean it has banned all AI use in banking. The email also says Bank of America is “excited about what AI used responsibly can deliver.” The central warning is about giving an outside tool the same broad credentials a customer uses to access an account, rather than authorizing a narrowly defined task.
Other developments show that agents are already entering financial services. On October 28, Visa told investors that trust is the biggest barrier to AI agents making payments, according to the source report. Robinhood said customers had placed more than $250 million into accounts that AI agents trade. Robinhood has set up a separate account and spending limits, but the source says the company also tells customers they “assume all risk” for trades made by AI agents.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Banking Credentials Matter
A bank password can provide access far beyond a single purchase or transfer. If an agent logs in with a customer’s credentials, it may be able to do much of what the customer can do, and the bank may have trouble distinguishing an authorized agent from the customer or an intruder. That can create problems both when the agent takes an action the customer did not intend and when a bank flags the activity and restricts account access.
Technical safeguards do not automatically settle who bears a loss. A separate account, transaction limits or other controls may reduce exposure, but they do not by themselves establish that a bank, platform or customer is legally responsible for a disputed transaction. Customers should read the provider’s terms before allowing an agent to trade or make payments, especially before switching off approval requirements.
The safer approach described in the source is to give an agent limited authority: read-only access, approval for each payment, a capped virtual card, a token restricted to a merchant, amount and time period, or a separate pool of funds. Those arrangements aim to let software complete a task without handing it a customer’s full account access. Their actual availability and protections depend on the service.
Products Worth Considering
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
LG UltraGear 27-Inch QHD OLED Gaming Monitor, 240Hz, 0.03ms, G-SYNC Compatible, FreeSync Premium Pro, HDMI 2.1
DJI Osmo Mobile 8 3-Axis Smartphone Gimbal Stabilizer
As an affiliate, we earn on qualifying purchases.
Banks Confront Agent Logins
The warning follows a report by Axios on October 22, which cited unnamed sources saying major US banks were finding third-party AI agents inside customer accounts, often logged in with the customers’ own passwords. The report said many banks could not tell whether the activity reflected what a customer wanted. According to the source material, banks have responded by blocking some unauthorized agents and revising their terms.
The legal implications are not settled. In the United States, the source points to Regulation E, whose definition of an unauthorized electronic fund transfer excludes some transfers initiated by a person given access by the consumer. The author’s view that this could apply to an AI agent or its provider is an interpretation, not a court or regulator ruling. In the European Union, PSD2 requires customers to take reasonable steps to protect personalised security credentials; whether giving credentials to an AI agent could amount to gross negligence has not been tested in court, according to the source.
Agents can also be influenced by instructions found in webpages, emails or files they process. The source identifies this as prompt injection and says it is ranked as a leading risk by the OWASP project. That risk makes broad, persistent account access especially consequential: an agent may encounter content intended to redirect its behavior while carrying authority tied to a customer’s finances.
““Your username and password should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.””
— Bank of America, in its customer email
Liability Rules Remain Untested
No court or regulator has ruled, according to the source, on how the cited US protections apply when a customer gives credentials to an AI agent. The source author’s reading of Regulation E is explicitly an interpretation. The same source says courts have not tested whether sharing credentials with an agent could violate the EU duty to protect security credentials through gross negligence.
It is also unclear how banks will distinguish customer-directed agent activity from fraud, what protections will apply across different agent services, and how responsibility will be divided among customers, banks and technology providers when an agent makes an unwanted payment or trade. The reported Robinhood account limits do not, on their own, answer those questions.
Watch for Narrower Agent Controls
Customers considering AI tools for banking or investing should check their bank’s terms and ask what permissions the agent receives, whether each transaction requires approval, and who bears losses if the agent acts unexpectedly. Until rules and practices are clearer, the source’s practical advice is to avoid sharing a full banking password and to use limited access or separate funds where those options are available.
Financial firms are likely to face continued pressure to define how agents can access accounts and make payments, as well as how customers can set limits and revoke access. The next signs to watch are clearer bank policies, agent-specific authorization tools and regulatory or court decisions addressing responsibility for transactions made through customer-approved software.
Key Questions
What did Bank of America tell customers?
It warned customers not to share their usernames and passwords with another person or an outside service, including an AI agent, and said they are responsible for activity resulting from credentials they share.
Has Bank of America banned customers from using AI?
The reported email warns against giving AI tools banking credentials. It also says the bank is excited about responsible uses of AI; the source does not report a general ban on AI use.
Are customers legally responsible for every action an AI agent takes?
The source does not establish that. It says the application of relevant US and EU rules to AI agents has not been tested in court, and Bank of America’s email states the bank’s position on credentials shared by customers.
What is a safer way to let an agent handle a financial task?
Options described in the source include read-only access, approval for each payment, a capped virtual card, a token limited by merchant, amount and time, or a separate account with limited funds. Availability and terms vary by provider.
Source: ThorstenMeyerAI.com
