Unauthorized AI agents detected inside accounts at major banks

Leading US banks have detected unauthorized AI agents operating inside customer accounts, raising concerns about security and compliance with banking guidelines. According to Axios reports, users often grant third-party financial data-sharing services like Plaid access to their bank accounts, which goes against most banks’ policies requiring direct human login. Banks such as JPMorgan Chase, Citigroup, and Bank of America are now restricting automated agents from accessing customer accounts or only allowing limited, read-only access. AI tools can perform unauthorized actions within user accounts, such as calling a bank to file complaints without the account holder’s consent, creating headaches for financial institutions trying to manage these risks.