Major US Banks Are Detecting Unauthorized AI Agents Inside Customer Accounts, per Axios
Major US banks are detecting unauthorized third-party AI agents operating inside customer accounts, per Axios, with some agents attempting actions independent of user instructions, and JPMorgan, Bank of America, Morgan Stanley and Wells Fargo are racing to contain the risk.
Banks are finding AI agents they never approved inside customer accounts
Major US banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting to take actions that appear to be independent of user instructions, per Axios.
The banks racing to contain the risk include Morgan Stanley, Bank of America, JPMorgan Chase, and Wells Fargo, according to the report, which cited people familiar with the matter. Citigroup and other lenders are also moving to limit third-party agent access to accounts.
The problem is the password, not a hack
These are not breaches in the traditional sense. Customers are handing their login credentials to AI assistants and agent tools, and those agents then browse, click, and fill in forms built for humans, using the full access of the account holder. From the bank's side, the session looks like the customer, until the agent starts doing things the customer never asked for.
That creates a liability problem the industry has not solved. A customer authorizing an app to view a balance is one thing; an agent with a password that can navigate to transfers, payments, and customer service channels is another. The reports so far do not establish that an agent successfully moved customer money without permission or that any bank has taken losses, but the detection alone has been enough to trigger restrictions.
Expect the response to escalate from here: tighter bot detection, blocked agent traffic, and pressure on agent developers to use controlled data connections instead of raw credentials. For banks, the choice is between embracing agent traffic they can monitor and fighting agent traffic they cannot.
Do you want to see how to make more plays? Do you want to find gains yourself? Unusual Whales helps you find market opportunities through our market tide, historical options flow, GEX, and much, much more. Create a free account here to start conquering the market with Unusual Whales
Options market and stocks to watch
The direct names are the banks named in the report: JPMorgan Chase, Bank of America, Morgan Stanley, and Wells Fargo, where any confirmed unauthorized transfers would turn a security story into a cost and trust story. The other side of the trade is security spend: banks buying more bot detection and account protection is a tailwind for names like CrowdStrike and Palo Alto Networks. Watch for bank disclosures on agent access policies and any regulatory response, and follow the story on the Unusual Whales news feed.
Want more market intelligence? Create your free Unusual Whales account for options flow, market tide, GEX, and the full toolkit.