Banks Uncover Rogue AI in Customer Accounts, Officials Shocked

Major Banks Find Third-Party AI Agents Operating Inside Customer Accounts, Raising Security and Liability Concerns

Major U.S. banks are detecting third-party AI agents operating inside customers’ online banking accounts after customers provided those tools with login credentials, according to new reporting from Axios that was later discussed on CBS News.

The activity has prompted concern across the industry, with banks weighing how to limit or block account access by AI-driven automation that is not vetted by financial institutions, even when customers intentionally authorize it.

Bank officials cited in the Axios reporting described the situation as “horrifying,” emphasizing the risk that an AI agent could make an error or initiate an action that harms a customer’s finances. Some institutions are also preparing contingency plans focused on quickly restoring accounts if an agent causes damage without permission.

Names mentioned in the reporting and follow-up coverage include Morgan Stanley, JPMorgan Chase, Bank of America, and Citi. Axios’ Madison Mills noted on CBS that the issue is not limited to a handful of firms and is viewed by sources as an industry-wide challenge.

In response to questions from media outlets, representatives for Morgan Stanley, JPMorgan Chase, Bank of America and Citi did not immediately return requests for comment. A Wells Fargo spokesperson told The New York Post that the bank “has taken steps to block unauthorized agents from accessing customer accounts.”

One key point in the debate is what “unauthorized” actually means. David Sacks, commenting in the CBS segment, said there is a “world of difference” between user-authorized agents and truly rogue agents that would qualify as cyberattacks. He argued the behavior described largely reflects customers sharing credentials with AI tools so the tools can take actions on their behalf.

Even if customers consent, banks may still treat this kind of access as prohibited. Sacks noted such usage may violate bank terms that require humans to log in themselves, while also arguing it should not be conflated with hacking.

The broader context is the rapid spread of consumer AI agents that can log in, read data, and execute tasks across websites and apps. When these tools are granted direct access to financial accounts, banks face a new mix of risks:

• Operational risk: an AI agent could make mistakes that trigger transfers, bill payments, or other account actions the customer did not intend.
• Fraud and accountability: disputes may become harder to resolve if an automated agent initiated actions using valid credentials.
• Security and privacy: granting credentials to third-party tools expands the number of places sensitive financial data can be exposed.

For crypto and fintech readers, the issue underscores a growing tension between automation and access controls. As AI agents become more capable of acting “on behalf” of users, banks and other financial platforms are being pushed to clarify what forms of delegated access are permitted, what gets blocked, and how consumers are protected when automated tools operate inside accounts.