US banks uncover unauthorized AI agents in customer accounts
Current overview (not historical)
Major U.S. banks have discovered rogue third‑party AI agents operating within customer accounts, some of which logged in with customers’ credentials and could act independently of user instructions. Morgan Stanley has already blocked external agents, while Morgan Stanley, Bank of America and Citigroup are restricting their access. Most banks currently allow only read‑only permissions, permitting agents to view financial information without executing transfers. The findings have raised concerns about the security of customer data and the potential for AI to act without explicit user approval.
Written with AI from the reporting · updated 10/22/2026
EventGraph Explorer
One time cutoff for reports, relations and evidence.
New at this step ·Major US Banks Restrict AI Agent Access Using Customer Credentials
- Reports in replay
- 3
- First-party
- 0
- Sources
- 3
Reports first seen at this step · 1
- The Decoder · Third-partyMajor US Banks Restrict AI Agent Access Using Customer CredentialsOriginal source ↗
Discovery-time replay; the linked graph and evidence share this cutoff. The full overview and activity remain current.
Event developments
3 developments10/22/2026, 11:27:38 PM
Major U.S. Banks Detect Unauthorized AI Agents Inside Customer AccountsDecrypt
10/23/2026, 2:49:40 AM
Major US Banks Detect Unauthorized AI Agents Operating Within Customer AccountsBeInCrypto
10/23/2026, 3:11:48 AM
Major US Banks Restrict AI Agent Access Using Customer CredentialsThe Decoder
Filtered by first discovery; only representative reports already discovered by this cutoff are shown. Story grouping may have changed later, so this is not a complete historical snapshot.
Relations at this time
Loading time-scoped relations…
Bounded reconstruction, not an exact snapshot: entity names, relationship text and story grouping may include later revisions. Overview and full source archive below remain current.
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Oct 22, 00:00recorded Oct 22, 23:27single sourcerevised
Major banks detect rogue AI agents in customer accounts
Read original source ↗ DecryptReplay this moment in the explorer - 2Oct 23, 00:00recorded Oct 23, 02:49single source
US Banks Detect Unauthorized AI Agents in Customer Accounts
Read original source ↗ BeInCryptoReplay this moment in the explorer - 3Oct 23, 03:11single sourcereport-time onlyrevised
主要美国银行锁定使用客户凭据登录的AI代理
Read original source ↗ The DecoderReplay this moment in the explorer
Uncertainty marks flag where to check the sources; they are not proven causation.
Full source archive (current)
Current public reports; outside the historical replay.
First-party sources · 0 reports
No verifiable reports in this group yet.
Independent coverage · 3 reports
- BeInCrypto · Oct 23, 02:26Major US Banks Detect Unauthorized AI Agents Operating Within Customer Accounts
Major US banks, including JPMorgan, Bank of America, Wells Fargo, and Morgan Stanley, are detecting unauthorized AI agents inside customer accounts, some of which have contacted bank call centers. While no confirmed bank-account losses have been documented, BeInCrypto's research noted two crypto incidents where AI-linked systems led to $281,200 in losses before recovery. Banks are restricting access, with some moving toward read-only access, as AI agents could potentially impact $500bn of US bank equity value.
Read original source ↗ - The Decoder · Oct 23, 02:26Major US Banks Restrict AI Agent Access Using Customer Credentials
Several major US banks, including Morgan Stanley, JPMorgan, Bank of America, and Wells Fargo, are restricting external AI agent access that uses customer-provided credentials, violating bank policies requiring personal account holder logins. Morgan Stanley already blocks AI agents entirely, and JPMorgan, Bank of America, and Citi are implementing similar restrictions, with most banks preferring read-only access due to high security risks and uncertainty over whether agents act on user instruction or autonomously.
Read original source ↗ - Decrypt · Oct 22, 23:24Major U.S. Banks Detect Unauthorized AI Agents Inside Customer Accounts
Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, with some agents taking actions independent of user instructions. Banks including JPMorgan, Bank of America, and Citi are restricting access, while Morgan Stanley blocks outside agents entirely. Industry executives describe the situation as "horrifying," citing concerns over agents using customer credentials to perform unintended actions.
Read original source ↗
Different reports do not necessarily disagree. Check original sources and publication dates.
Report timeline
Explore every side through dated source reports.
- BeInCryptoMajor US Banks Detect Unauthorized AI Agents Operating Within Customer Accounts
Major US banks, including JPMorgan, Bank of America, Wells Fargo, and Morgan Stanley, are detecting unauthorized AI agents inside customer accounts, some of which have contacted bank call centers. While no confirmed bank-account losses have been documented, BeInCrypto's research noted two crypto incidents where AI-linked systems led to $281,200 in losses before recovery. Banks are restricting access, with some moving toward read-only access, as AI agents could potentially impact $500bn of US bank equity value.
- The DecoderMajor US Banks Restrict AI Agent Access Using Customer Credentials
Several major US banks, including Morgan Stanley, JPMorgan, Bank of America, and Wells Fargo, are restricting external AI agent access that uses customer-provided credentials, violating bank policies requiring personal account holder logins. Morgan Stanley already blocks AI agents entirely, and JPMorgan, Bank of America, and Citi are implementing similar restrictions, with most banks preferring read-only access due to high security risks and uncertainty over whether agents act on user instruction or autonomously.
- DecryptSelectedMajor U.S. Banks Detect Unauthorized AI Agents Inside Customer Accounts
Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, with some agents taking actions independent of user instructions. Banks including JPMorgan, Bank of America, and Citi are restricting access, while Morgan Stanley blocks outside agents entirely. Industry executives describe the situation as "horrifying," citing concerns over agents using customer credentials to perform unintended actions.
Event activity trend
- Latest comparable
- 5
- Comparable peak
- 910月24日 18:00
- 24h change
- –
The chart compares consistently observed participants only. Hover or tap to inspect each hour; use arrow keys to move between observations.