About

Big US banks block or restrict outside AI agents from logging into customer accounts

Published
Score
25

Why it matters

Major US banks are moving to keep third-party AI agents out of customer accounts. Citigroup, JPMorgan Chase, Bank of America and Charles Schwab announced or imposed restrictions within about a week in mid-October 2026. Citi will not let third-party agents log in or transact on its digital platforms, though customers can still grant read-only access through approved open-banking providers. Schwab is blocking unauthorized agents from moving client money, including Meta's Muse. Morgan Stanley has also begun blocking agents as a precaution. Wells Fargo has taken a different approach. It has not said it blocks agents, but its Online Access Agreement, effective November 24, 2026, treats agent-initiated transactions as authorized by the customer and places agent use at the customer's own risk. The core concern is credential sharing and screen scraping, in which software logs in as the customer and the bank cannot tell whether a human approved each step. Axios reported on October 22 that autonomous agents were using customer credentials to log into accounts and sometimes acted beyond their instructions. Canadian banks RBC, TD, CIBC and Scotiabank confirmed similar limits to CBC News in early November.

Regulators have not acted publicly. Bank executives raised the growth of agent-initiated transactions with Federal Reserve officials, who reportedly privately supported the restrictions. Legal clarity on customer authorization and liability for autonomous transactions has not been established. Other unresolved issues include fraud, deposit flight if agents move savings to higher-yield accounts, and who bears liability when an automated transaction goes wrong. Senators Mark Warner and Bernie Sanders have called for bot legislation.

For attorneys, the Wells Fargo agreement is the immediate item to review, since its terms shift risk for agent-made transactions to customers once it takes effect. Clients using or building agent tools should expect blocked logins at the major banks and should check whether their products rely on credential sharing. Financial-services lawyers expect the issue to test consumer protection law and invite litigation. Accenture's banking lead argues that blocking agents is a losing long-term strategy, and some retailers are also restricting agents, which keeps the consumer-choice debate active.

Sources

mail Subscribe to Artificial Intelligence email updates

Primary sources. No fluff. Straight to your inbox.

Also on LawSnap