🔍 Read the full analysis: How Much Access Should An AI Agent Have To Your Money? on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to share banking credentials with AI tools, saying customers are responsible for activity resulting from that access. Visa has identified trust as a barrier to agent payments, while Robinhood says customers have placed more than $250 million in accounts where AI agents trade. The scope of legal protections and the safeguards available to users remain unsettled.
Bank of America has warned customers not to give their banking usernames and passwords to AI assistants, saying customers who share credentials are responsible for activity resulting from that access. The warning comes as Visa identifies trust as a barrier to AI-powered payments and Robinhood says customers have put more than $250 million into accounts used for AI-agent trading, bringing the question of how much financial authority agents should receive into sharper focus.
The bank’s email, titled “Protecting your finances in the AI World,” says credentials should never be shared with another person or outside service, including an AI-enabled tool or agent acting on a customer’s behalf. Bank of America confirmed to TechCrunch that the email is authentic after a customer posted it on Bluesky. The bank also said it is “excited about what AI responsibly used can deliver.”
The email states that customers who share credentials are responsible for resulting activity. That warning does not, by itself, settle whether a bank can deny a particular claim or how consumer-protection law would apply to an AI agent. The legal question is not resolved in the source material.
The developments point to different models of financial access. A password may let an agent act as if it were the account holder, while a limited setup could restrict an agent to reading information, making a payment only after approval, or spending through a card with a set limit. Robinhood’s reported account separation and spending limits offer safeguards, but the company says customers “assume all risk” for trades made by AI agents.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Broad Account Access Matters
Giving an agent a banking password is not the same as approving one purchase. It can give software access to whatever the credentials allow, while leaving the bank with a familiar login that may be difficult to distinguish from the account holder or a thief. That creates risks of unwanted transactions, account lockouts and disagreements over who should bear a loss.
There is also a technical risk: agents process webpages, messages and documents that may contain instructions designed to manipulate their behavior. The OWASP project lists prompt injection as a leading risk for AI applications. A customer may authorize an agent to perform a task without knowing that material it reads could try to redirect it. The source does not establish that such an attack has caused the financial activity described here, but it explains why limiting an agent’s authority matters.
For consumers, the practical issue is how much potential loss they are willing to accept and what protections apply if the agent makes a mistake. For banks and payment companies, unclear responsibility can affect customer trust and the design of services. A narrow permission—such as a transaction cap, a short expiration period or approval for each payment—can limit exposure compared with handing over a master credential. These safeguards reduce access; they do not automatically determine liability.
Popular right now
Dyson Cyclone V10 Origin Cordless Vacuum
Dyson V8 Cordless Vacuum
Samsung 42-Inch S90H OLED 4K Smart TV Bundle
As an affiliate, we earn on qualifying purchases.
Banks Face an Agent Access Problem
On October 22, Axios reported, citing unnamed sources, that major U.S. banks were finding third-party AI agents in customer accounts, typically using passwords supplied by customers. According to that report, banks often could not tell whether the activity was authorized by the customer. The source material says banks are blocking some agents and revising terms, but does not identify the institutions or provide details of specific blocked transactions.
U.S. consumer protections for electronic transfers include an exception for a transfer initiated by someone who was given access to an account by the consumer, under Regulation E’s definition of an unauthorized transfer. The source author interprets this as potentially relevant when a customer shares login credentials with an AI agent, but says no regulator or court has ruled on that application. In the European Union, PSD2 requires customers to take reasonable steps to protect personalized security credentials; how the rules would apply to an AI agent has not been tested in court, according to the source.
The October 28 report also describes activity moving beyond warnings: Visa told investors that trust is the main barrier to agent payments, and Robinhood said customers had placed more than $250 million into accounts for AI-agent trading. Those figures and statements show companies are addressing the issue, but they do not establish how many customers are using agents or how well the safeguards work.
“Your username and password “should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.””
— Bank of America, in its customer email
Liability Rules Remain Untested
No court or regulator ruling is cited on whether giving an AI agent banking credentials counts as furnishing an access device under U.S. Regulation E, or whether it could amount to gross negligence under EU payment rules. The legal outcome may depend on the facts, applicable terms and jurisdiction; the source author’s reading of the statutes is not a legal ruling.
It is also unclear how many people are giving agents access to bank accounts, what transactions the reported Robinhood accounts support, or what losses, if any, customers have experienced. The source provides no independent assessment of the effectiveness of Robinhood’s limits, nor details of Visa’s proposed protections. Bank of America’s email warns customers about responsibility but does not explain how the bank would review a claim involving an AI agent.
Watch for Tighter Payment Controls
The immediate next steps will depend on how banks, payment networks and agent providers set permissions and explain responsibility to customers. Customers considering an AI-linked financial service should read its terms, check whether it can move money or only view information, and confirm the limits, approval process and method for revoking access. A separate account or capped payment method may limit the amount exposed, but does not guarantee reimbursement if something goes wrong.
More clarity may come through revised bank terms, new payment products, regulatory guidance or court cases involving agent-directed transactions. None is identified in the source material as a scheduled milestone. Until those questions are resolved, the confirmed warning from Bank of America is narrower than a ban on AI in finance: it advises customers not to share their banking credentials with AI tools and says they may bear responsibility for activity enabled by sharing them.
Key Questions
What did Bank of America tell customers?
It warned customers not to share usernames or passwords with outside services, including AI-enabled tools and agents. The email says customers are responsible for activity resulting from shared credentials.
Does sharing a password automatically remove fraud protection?
That is not established. U.S. and EU rules may be relevant, but the source says no court or regulator has ruled on how they apply to an AI agent receiving a customer’s credentials. A particular claim could depend on its facts and applicable law.
What is a safer way to give an agent access?
Use the narrowest permission available: read-only access, approval for each payment, a card with a spending limit, or a separate account with only a limited balance. Check how long access lasts and how to revoke it. These controls limit exposure but do not guarantee that losses will be reimbursed.
What has Robinhood said about AI-agent trading?
The source reports that Robinhood said customers had put more than $250 million into accounts used by AI agents. It also says Robinhood provides separate accounts and spending limits while stating customers assume all risk for trades made by agents.
Source: ThorstenMeyerAI.com
