🔍 Read the full analysis: Before Your AI Agent Handles Money, Protect Your Bank Login on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to share their online banking usernames or passwords with AI tools or agents, saying customers are responsible for activity resulting from shared access. Reports of agents accessing bank accounts and financial firms’ efforts to support agent-led payments highlight unresolved questions about security, customer protection and who bears losses.
Bank of America has warned customers not to share their banking usernames or passwords with AI-enabled tools or agents, saying they are responsible for activity resulting from access they provide. The warning comes as financial firms confront AI agents interacting with accounts and payments, while the rules governing customer losses in those cases remain unsettled.
The bank’s email, titled “Protecting your finances in the AI World,” said credentials “should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.” A customer posted the email on Bluesky, TechCrunch reported on October 27, and a Bank of America spokesperson confirmed to the outlet that it was authentic. The bank also said it was “excited about what AI used responsibly can deliver.”
Bank of America added that customers who share credentials are “responsible for activity resulting from that access.” That is the bank’s stated position; it does not, by itself, resolve how consumer-protection laws would apply to a disputed transaction involving an AI agent. The source account notes that no regulator or court ruling on that specific question was identified.
The warning sits alongside wider activity in finance. According to the source material, Axios reported October 22, citing unnamed sources, that major U.S. banks were finding third-party AI agents in customer accounts, often using customers’ own passwords. The report said banks may struggle to determine whether the activity was authorized by the customer. Visa told investors this week that trust is the biggest barrier to AI agents making payments, while Robinhood said customers had placed more than $250 million into accounts that AI agents trade. The source does not specify the period covered by that figure.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
A banking password is not a narrowly limited permission. An agent signing in with a customer’s credentials may be able to access or act within the account in ways the customer did not intend. It can also make the agent’s actions difficult for a bank to distinguish from actions taken by the customer—or by a thief using stolen credentials.
The consequences may extend beyond an unwanted transaction. Banks may block access if they suspect account takeover, while customers may face disputes over whether a transfer was truly unauthorized after they supplied the login. The source material describes potential U.S. and EU legal issues, but those applications to AI agents are not settled. Customers should not assume that a bank’s fraud protections will work the same way when they have given a tool their credentials.
There is also a distinct technical risk: agents process outside content, including webpages, messages, invoices and files. The source identifies prompt injection—content designed to steer an AI system—as a risk recognized by the OWASP project. If an agent can both be influenced by content and act through a full-access banking login, the possible impact is larger than if it can only read information or make a capped payment.
Products Worth Considering
Logitech MX Mechanical Full-Size Wireless Mechanical Keyboard, Tactile Quiet Switches, Backlit Keys, Bluetooth, USB-C, Multi-Device, Graphit
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
LG 24G414B-B 24-Inch UltraGear Full HD IPS Gaming Monitor
As an affiliate, we earn on qualifying purchases.
Banks Confront Agent Account Access
The issue is not simply whether people will use AI for financial tasks. The source describes agents already interacting with money in different ways: some reportedly access bank accounts through customer logins, while Robinhood says customers have funded accounts that AI agents trade. Visa’s comments to investors point to trust as a barrier to broader agent payments.
These examples are not all the same. An agent that reads account data, one that trades within a separate account and one that can initiate a bank transfer have different permissions and risks. Robinhood’s reported use of a separate account and spending limits offers some boundaries, but the company’s stated allocation of responsibility remains relevant: the source says Robinhood tells customers they “assume all risk” for trades by AI agents.
Existing payment rules were written around people and established access methods, not necessarily software agents acting through a customer’s login. The source cites U.S. Regulation E and the EU Payment Services Directive as relevant frameworks, while stressing that applying them to AI agents involves interpretation rather than a settled legal conclusion.
““Your username and password should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.””
— Bank of America, in its customer email
Open Questions on Customer Liability
No court or regulator decision identified in the source determines whether giving an AI agent a banking password counts as furnishing an account access device under U.S. rules, or whether it amounts to gross negligence under the EU payment rules cited. Those are legal interpretations in the source, not settled findings, and individual cases may depend on their facts and applicable terms.
It is also unclear how widespread unauthorized agent access is. The account of banks finding agents in customer accounts comes from an Axios report citing unnamed sources; the source provides no count, timeframe beyond the October 22 report, or bank-by-bank details. The period behind Robinhood’s reported $250 million figure is not specified either.
The source does not provide the complete wording of Visa’s investor comments or detailed technical information about the safeguards used by the financial firms mentioned. It also does not establish what protections, if any, a particular bank or AI provider would offer if an agent makes an unintended payment.
Safer Permissions and Bank Guidance
For customers, the practical next step is to avoid giving an agent a primary banking password. The source points to narrower options: read-only access, requiring approval for every payment, a virtual card with a spending limit, a token limited to a merchant, amount and time window, or a separate account with only a limited balance. These controls reduce what an agent can do, but they do not automatically settle who is responsible if something goes wrong.
Before connecting a financial account, customers can check the bank’s terms, the agent provider’s permissions and the process for revoking access. They should also understand whether the agent can initiate transfers, change account settings, or make purchases without approval. Companies building agent payment systems will need to explain those boundaries and liability terms clearly if customers are expected to trust them.
The source does not report a new ruling, regulatory deadline or announced change to Bank of America’s policy. Further developments will depend on how banks, payment firms and regulators respond to agent access, and whether legal or technical standards clarify authorization and responsibility.
Key Questions
What did Bank of America tell customers?
It said customers should not share usernames or passwords with other people or outside services, including AI tools and agents, and warned that customers are responsible for activity resulting from shared access.
Does sharing a password automatically remove fraud protection?
The source does not establish that it automatically does. It describes potentially relevant U.S. and EU rules but says their application to AI agents has not been settled by a court or regulator identified in the report.
What is a safer way to let an AI agent handle a payment?
The source recommends narrower access, such as read-only permissions, approval for each payment, a limited virtual card, a token restricted by merchant, amount and time, or a separate account with limited funds. These safeguards do not by themselves determine liability.
What is prompt injection?
It is an attempt to steer an AI system through content it reads, such as a webpage, email or file. The source cites it as a risk for agents that process outside information and can take actions.
Have banks confirmed how common AI-agent access is?
The source cites an October 22 Axios report, based on unnamed sources, about major U.S. banks finding third-party agents in customer accounts. It gives no count or bank-by-bank data, so the scale remains unclear.
Source: ThorstenMeyerAI.com
