🔍 Read the full analysis: Set Boundaries Before Letting An AI Agent Handle Money on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America warned customers not to share banking credentials with AI tools, saying customers are responsible for activity resulting from that access. The warning comes as financial firms report growing interest in AI-led transactions, while the legal and practical limits of customer protections remain unsettled.
Bank of America warned customers not to give their usernames or passwords to AI assistants or agents, saying they are responsible for activity resulting from access they provide. The warning comes as banks face reports of AI tools logging into customer accounts and as firms including Visa and Robinhood discuss the growing role of agents in payments and trading.
The bank’s email, titled “Protecting your finances in the AI World,” says credentials “should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.” It adds that customers who share credentials are responsible for activity resulting from that access. A customer posted the email on Bluesky; TechCrunch reported it on October 27, and a Bank of America spokesperson confirmed its authenticity to the publication.
The bank also said it is “excited about what AI used responsibly can deliver.” Its warning focuses on the risks of giving an agent the same login credentials a customer uses: an agent may be able to access account functions beyond the task it was asked to perform, while the bank may have difficulty distinguishing the agent’s activity from the customer’s or from a fraudster’s.
Separately, Axios reported on October 22, citing unnamed sources, that major U.S. banks were finding unauthorized third-party AI agents in customer accounts, often using customers’ own passwords. The report said banks could not always determine whether customers had intended to authorize that activity. The available source material does not establish how widespread those cases are.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Account Access Changes the Risk
A password can grant an AI agent broad account access, rather than permission for one defined action. If an agent makes a payment or changes account details, the bank may see a valid login and have limited ability to determine whether the customer approved the specific action. That can create both financial exposure and account-access problems, including a bank locking an account after activity it considers suspicious.
The warning also highlights a possible gap between technical safeguards and legal responsibility. A separate account, spending limits or payment approvals may reduce the amount an agent can affect, but they do not automatically settle who bears losses when something goes wrong. Customers considering agent access need to distinguish what a service can do from what its terms say about liability.
One narrower approach is to grant only the access needed for a task: for example, read-only permissions, approval before each payment, a capped virtual card, or a separate account with limited funds. These controls can reduce exposure, but they do not make an agent error-proof. The source material describes them as safer patterns, not guarantees.
Products Worth Considering
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
DJI Osmo Pocket 3 Filter Bundle – Vlogging Camera with 1 CMOS Sensor and 4K/120fps
Amazon Kindle Paperwhite (12th Generation, 2024), 16 GB, 7-inch Display, Jade
As an affiliate, we earn on qualifying purchases.
The Rules Have Not Been Tested
U.S. Regulation E defines an unauthorized electronic transfer to exclude one initiated by a person who received access to an account from the consumer, unless the consumer has told the financial institution that the person is no longer authorized. The article’s author interprets that provision as potentially relevant to AI agents given customer login details, but says no regulator or court has ruled on that application. It is not a settled legal conclusion.
In the European Union, the Payment Services Directive requires users to take reasonable steps to keep personalized security credentials safe. The source argues that sharing a password with an AI agent could raise questions under that duty, but says there is no identified court ruling on whether doing so would amount to gross negligence. Customers’ rights may depend on the circumstances and applicable law.
The financial industry signals point to a broader shift. The source says Visa told investors that trust is the main barrier to AI agents making payments, while Robinhood said customers had put more than $250 million into accounts that AI agents trade. The source gives no date range or comparison baseline for Robinhood’s figure, so it is a reported amount, not evidence of a specific growth rate. Robinhood also says customers “assume all risk” for trades by AI agents, despite account separation and spending limits.
““Your username and password should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.””
— Bank of America, in the customer email confirmed to TechCrunch
Liability and Scale Remain Unclear
No court or regulator ruling cited in the source material determines how the U.S. or EU provisions apply when a customer gives credentials to an AI agent. Whether a particular transaction is authorized, and whether a customer could recover a loss, may depend on the facts, the service terms and the relevant law.
It is also unclear how many bank accounts have been accessed by third-party agents, how many incidents involved financial loss, and what share of activity was authorized by account holders. The Axios report cited unnamed sources, and the source material provides no independently verified totals. Robinhood’s reported $250 million figure has no stated time window or comparison baseline.
Finally, the material does not specify what technical controls financial institutions or AI providers are adopting across their services. Limited permissions and transaction approvals may constrain an agent, but their effectiveness depends on how each product implements them.
Watch for Safer Permission Models
Customers should review the permissions and liability terms before connecting an AI agent to a financial account, and avoid sharing a primary banking password where a service offers narrower access. Where available, read-only connections, payment-by-payment approval, capped virtual cards or a separately funded account can limit what an agent is able to do.
Financial institutions and AI providers will need to clarify how their systems identify agent activity, what approvals customers are granting and how disputes are handled. Further reporting or regulatory guidance may clarify whether existing consumer-protection rules apply to agent-initiated transactions. Until then, the source material does not establish a uniform standard for customer liability or agent safeguards.
Key Questions
What did Bank of America tell customers?
It warned customers not to share banking usernames or passwords with outside services, including AI tools and agents. The email says customers are responsible for activity resulting from access they provide.
Does sharing a password automatically remove fraud protection?
The source does not establish that as a settled rule. It says U.S. and EU provisions may be relevant, but their application to AI agents has not been decided by a court or regulator cited in the report.
What is a safer way to let an AI agent handle a payment?
Use limited permissions where available, such as read-only access, approval before each payment, a capped virtual card or a separate account with limited funds. These controls can reduce exposure but do not guarantee that mistakes or disputes will not occur.
Can a bank tell whether an account action came from an AI agent?
The reports described in the source say banks may have difficulty distinguishing agent activity performed with a customer’s password from activity initiated by the customer or by someone using stolen credentials.
What remains unknown about AI agents and money?
The scale of agent access and related losses is not established in the source material. It also remains unclear how existing consumer-protection rules apply to specific AI-driven transactions and what safeguards providers will adopt.
Source: ThorstenMeyerAI.com
