U.S. Banks Tighten AI Access Rules Amid Security Concerns

0

Major U.S. banks restrict third-party AI agents from accessing customer accounts as security risks rise.

A group of individuals, including a woman in a purple top, are seated at a table with microphones, suggesting a formal meeting or hearing.

2 min read

Major U.S. banks are taking steps to restrict third-party artificial intelligence agents from accessing customer accounts, citing growing security concerns. Citi and Wells Fargo confirmed these restrictions to the Daily Caller News Foundation, highlighting the increasing challenge financial institutions face as consumers use AI tools that can access sensitive banking information and potentially conduct transactions on their behalf.

“To help safeguard customer accounts and information, we do not permit third-party AI agents or assistants to log into a customer’s account or transact directly within our digital banking platforms,” Citi spokeswoman Gabrielle Baum told the DCNF.

“Customers can, however, continue to authorize limited, read-only access to their account information with certain Citi-approved open banking providers,” Baum added.

Wells Fargo also confirmed it has taken steps to restrict unauthorized access.

“Wells Fargo has taken steps to block unauthorized agents from accessing customer accounts,” a company spokesperson told the DCNF.

Major financial institutions, including JPMorgan Chase, Bank of America, Morgan Stanley, and Wells Fargo, are confronting security concerns involving outside AI agents accessing customer accounts, according to an Axios report. Some agents reportedly appeared to take actions beyond customers’ instructions, according to people familiar with the issue cited in the report.

However, an industry source familiar with the issue told the DCNF that the immediate concern is not AI agents independently infiltrating customer accounts, but customers voluntarily sharing their banking credentials with third-party AI tools.

The source said there is not yet evidence of agents being instructed to perform one task and independently carrying out another. Rather, the activity originates with customers granting access to their accounts, creating potential security risks that banks may struggle to distinguish from legitimate customer activity.

Although customers may authorize AI tools to access their accounts, financial institutions can still prohibit those tools from logging in or conducting transactions.

Unlike conventional chatbots, AI agents are designed to carry out tasks on behalf of users, potentially including reviewing financial information, making purchases, or transferring money. Depending on the permissions granted, the technology could move beyond providing financial recommendations to taking actions involving customers’ funds.

Morgan Stanley has begun blocking outside AI agents from accessing its platforms, while JPMorgan, Bank of America, and Citi have also restricted access, according to Axios. Banks have tightened restrictions partly over concerns that outside agents could expose customer information or initiate transactions without sufficient safeguards.

Source: Daily Caller

Written by
Connor Davis

Leave a Reply

Your email address will not be published. Required fields are marked *