Axios reported several major U.S. banks have detected unauthorized third‑party
AI agents operating inside customer accounts, with some agents attempting
actions apparently independent of user instructions. Banks are blocking the
technology and rapidly revising terms of service; Morgan Stanley, BofA, JP
Morgan and Wells Fargo are racing to curb the risk. Some institutions have
already detected unauthorized access: Morgan Stanley has begun blocking
third‑party agent access to its platform, while JP Morgan, BofA and Citigroup
are restricting agent access. A Citigroup spokesperson warned customers not to
share usernames and passwords; a Morgan Stanley spokesperson said the bank has
not found "malicious AI agent" access to its platform.
