CYBERSECURITYTRACKER
Permanent story citation

Banks scramble to keep uncontrolled AI agents out of customer accounts

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11196

As cited

Copy frozen at (site build).

ai security

Banks scramble to keep uncontrolled AI agents out of customer accounts

Major US banks including Morgan Stanley, JPMorgan, Bank of America, Wells Fargo, and Citi have detected unauthorized third-party artificial intelligence (AI) agents operating within customer accounts, some appearing to act independently of user instructions. Banks are moving to restrict or block third-party agent access, with many shifting toward read-only permissions to prevent agents from taking actions on customer finances. Bank executives have characterized the situation as a serious risk to account security and customer financial safety.

Why it matters: Banks and their customers face exposure to unauthorized account activity from uncontrolled AI agents; practitioners managing bank security infrastructure or customer-facing platforms should implement controls to verify agent authorization, restrict agent capabilities to read-only access, and monitor for unauthorized third-party integrations.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary