Unapproved AI helpers are already getting into US bank accounts, report says

What happened

Axios reports that outside AI agents the banks haven't approved, helper programs that take actions for you, are getting into US bank accounts. In some cases, the likely way in is a login the customer handed over. Unnamed sources at several banks say some agents appear to take actions users didn't ask for, like contacting call centers. Morgan Stanley, Bank of America, JPMorgan and Wells Fargo are making changes. Some block these agents, and others limit them in certain cases. Many want them limited to just looking. Chase, JPMorgan's consumer bank, says don't give your password to anyone, including AI.

What's actually going on

Quick reminder: an AI agent is an AI you hand a job and some tools, and it takes step after step on its own to finish it. Engadget says many agents can get into a bank account to act for you. In plain terms, that can mean handing over your username and password so it logs in as you.

Why it matters that it's AI: these agents can read a web page, pick a next step, and keep going without checking back with you. That's what lets them finish a chore with many steps. It's also why they can take steps you didn't spell out. Unnamed bank sources told Axios that agents appear to have done things like contact call centers without specific permission.

To the bank, your password looks like you, and Engadget notes most banks require people to log in themselves. Some banks now block outside agents. Many want agents to have read-only access, so they can look but not act. JPMorgan Chase CEO Jamie Dimon spoke on a recent earnings call, a regular update for investors. He warned there could be thousands of rogue agents on financial platforms, though the reports don't say exactly what he meant by rogue.

Then there's the money. Engadget points to laws like the US Electronic Fund Transfer Act, a federal law on electronic payments. In its reading, a loss from an agent you gave your login to would likely count as your own choice, not fraud, so the bank wouldn't have to repay you. It also says there haven't been many stories of real losses yet.

In your life

My take: if you've thought about letting an AI helper pay bills or move money, wait. Letting one just read your accounts is probably lower risk than letting it act. If you've never handed over a bank login, roughly nothing changes for you today.

Be careful about

If an agent with your login makes a bad move, Engadget says you likely won't get the money back, since sharing your password can count as your choice. And the reports of agents acting on their own come from unnamed sources, so how often it happens isn't clear.

Where to get it

There's nothing to get here. One small step: Chase's advice is not to give your bank username and password to anyone, AI apps included. If you already have, my own suggestion is to change your bank password today.