Threat Pulse 62High
Axios: banks find outside AI agents in customer accounts; JPMorgan, BofA, Citi restrict
Severity 5ActivereportedFinanceAI-related

Axios reported that major US banks detected outside AI agents operating in customer accounts, some acting beyond what users asked. Morgan Stanley blocked third-party agents outright; JPMorgan, Bank of America and Citi are restricting them and moving toward read-only access, while flagging transactions that involve shared credentials. Jamie Dimon has said customers who hand credentials to an agent own the risk.

What to do: Restrictions rolling out; one bank said it had seen no rogue agents.

AI angle: Dispute over whether these are rogue agents or user-authorized agents the banks had not approved.

· 13 days ago · customers of the largest US banks · eSecurity Planet
On X
@axiosverifiedOct 22, 13:56 UTC

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting to take actions that appear to be independent of user instructions. https://t.co/QG

Open on X
Why this score

Restrictions confirmed by spokespeople; the claim that agents acted beyond user instructions rests on anonymous sources and is disputed

time of earliest verified post

Updated Nov 5, 01:47 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.