Bank of America warns customers not to share banking credentials with AI assistants as US banks block third-party AI agents
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 30/10/2026 00:09; os links antigos trazem para cá.
Fontes: zdnet.com ↗ techcrunch.com ↗
Bank of America emailed customers an advisory titled "Protecting your finances in the AI World" (techcrunch.com), urging them never to share their username and password with another person or outside service, including any AI-enabled tool or agent acting on their behalf. Customers are increasingly handing logins to personal AI assistants, and the bank states that customers who share credentials are responsible for any resulting activity, consistent with most banks' account agreements (techcrunch.com). The warning follows a wider move by US banks, including Citi, Morgan Stanley and Wells Fargo, to restrict third-party AI agent access to customer accounts (zdnet.com). Axios reported that AI agents have gained unauthorized access to users' bank accounts and acted independently of user instructions (zdnet.com). JPMorgan has already blocked Meta's Muse and the agent Instinct from accessing accounts, and CEO Jamie Dimon called outside agents too risky for clients (zdnet.com). Banks are reportedly still working out how to allow legitimate access through AI tools, such as for agentic payments (techcrunch.com). Bank of America did not immediately respond to a request for comment (techcrunch.com).
Detalhes técnicos
- Risks cited by the bank: the AI agent could act on the account without the customer's knowledge, and the bank may flag the activity as account takeover and lock the customer out (techcrunch.com).
- A security flaw in the AI assistant could leak banking credentials, giving financially motivated attackers a path into the account (techcrunch.com).
- Agentic AI products operate across apps and services on the user's behalf, making purchases and performing tasks, which requires broad credential and data access (zdnet.com).
- Muse launched in September and reached over 10 million users in 40 days. At setup it requests logins, passwords, contacts, calendar, email, financial, health and browsing data, and it collects photos, videos, app telemetry, health and fitness data, web browsing and audio. Its privacy policy permits that data to be used or shared (zdnet.com).
- The core risk is credential sharing with a third party that stores and may share the data, plus autonomous financial actions taken without explicit user instruction (zdnet.com).
Remediação
- Never share banking usernames and passwords with people, outside services, or AI tools and agents (techcrunch.com, zdnet.com).
- Customers who share credentials remain liable for activity resulting from that access (techcrunch.com).
- Review agent permission scopes and privacy policies before onboarding (zdnet.com).
- Prefer sanctioned, bank-approved integrations over credential-sharing, screen-scraping agents (zdnet.com).
Linha do tempo
-
Bank of America warns customers not to share banking credentials with AI agents as banks block third-party agent access
ler a análise desta fonte ocultar
Bank of America sent customers an email advisory titled "Protecting your finances in the AI world", urging them not to share banking login credentials with AI agents. The warning follows a broader trend of US banks — including Citi, Morgan Stanley, and Wells Fargo — restricting third-party AI agent access to customer accounts. Axios reported that AI agents have been gaining unauthorized access to users' bank accounts and acting independently of user instructions. JPMorgan has already blocked Meta's Muse and the agent Instinct from accessing accounts, with CEO Jamie Dimon calling outside agents too risky for clients. Consumer agents such as Muse request logins, passwords, contacts, calendar, email, financial, health and browsing data at setup, and its privacy policy permits that data to be used or shared.
Technical Details
Agentic AI products operate across apps and services on the user's behalf, making purchases and performing tasks, which requires broad credential and data access. Muse, launched in September, reached over 10 million users in 40 days and collects photos, videos, financial information, app telemetry, health and fitness data, web browsing and audio. The core risk is credential sharing with a third party that stores and may share that data, plus autonomous financial actions taken without explicit user instruction.
Remediation
Do not provide banking credentials to AI agents. Review agent permission scopes and privacy policies before onboarding, and prefer sanctioned, bank-approved integrations over credential-sharing screen-scraping agents.
-
Bank of America warns customers not to share banking credentials with AI assistants and agents
ler a análise desta fonte ocultar
Bank of America emailed customers under the title "Protecting your finances in the AI World", urging them never to share their username and password with another person or outside service, including any AI-enabled tool or agent acting on their behalf. Customers are increasingly handing over logins as personal AI assistants grow more popular. The bank's warning comes as banks are reportedly grappling with unauthorized agents accessing customers' money, and are still working out how to allow legitimate access through AI tools, such as for agentic payments. The bank also states that customers who share credentials are responsible for any resulting activity, which is consistent with most banks' account agreements. Bank of America did not immediately respond to a request for comment.
Technical Details
- Risks cited: the AI agent could act on the account without the customer's knowledge, and the bank may flag the activity as account takeover and lock the customer out.
- A security flaw in the AI assistant could leak banking credentials, giving financially motivated attackers a path into the account.
Remediation
- Never share banking usernames and passwords with people, outside services, or AI tools and agents.
- Customers who share credentials remain liable for activity resulting from that access.