🔍 Read the full analysis: Use AI For Money Tasks Without Handing Over Your Banking Login on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to share banking usernames or passwords with AI tools, saying customers are responsible for activity resulting from that access. The warning comes as financial firms report growing use of AI agents for money-related tasks, but the legal and liability implications remain unsettled. Safer approaches limit what an agent can access or require approval before it moves money.
Bank of America has warned customers not to give their usernames or passwords to AI assistants, saying they are responsible for activity that follows if they share those credentials. The warning, confirmed by a bank spokesperson to TechCrunch after a customer posted the email, comes as financial firms confront AI agents accessing accounts and handling transactions.
The email, titled “Protecting your finances in the AI World,” says credentials should never be shared with another person or an outside service, including an AI-enabled tool or agent acting on a customer’s behalf. It adds that customers who share credentials are responsible for activity resulting from that access. Bank of America also says it is “excited about what AI used responsibly can deliver.”
The warning addresses a basic security problem: an agent that signs in with a customer’s password may appear to the bank as the customer—or as someone who has stolen the password. It may be able to do much more than the specific task the customer intended. The same access could also trigger a bank’s fraud controls and lead to an account being restricted.
The source article says Axios reported on October 22, citing unnamed sources, that major U.S. banks were finding third-party AI agents in customer accounts, often using the customers’ own credentials. It also reports that Visa told investors this week that trust is the main barrier to AI agents paying for purchases, while Robinhood said customers had placed more than $250 million into accounts that AI agents trade. These reports point to growing activity, but do not establish how many customers are affected or how those agents performed.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Bank Passwords Carry Broad Risk
Sharing a password can give an AI agent access to a customer’s whole account rather than one narrowly defined task. That creates risks beyond an unwanted payment: an agent could take an action the user did not intend, while a bank may have difficulty distinguishing authorized automation from account theft. Customers could also face disruption if the bank blocks activity it cannot identify.
The consequences for reimbursement are not settled. The source article interprets U.S. Regulation E as potentially excluding transfers initiated by someone given account access by the consumer, but says no regulator or court has ruled on how that provision applies to an AI agent. In the EU, PSD2 requires customers to take reasonable steps to protect personalized security credentials; the article says it is not clear whether giving credentials to an AI agent would count as gross negligence. These are legal interpretations, not determinations about any particular customer’s case.
Technical limits can reduce exposure, but they do not automatically settle who pays when an agent makes a mistake. The source material says Robinhood offers a separate account and spending limits, while also stating that customers assume all risk for trades made by AI agents. Readers should check both the controls and the terms before authorizing an agent.
Products Worth Considering
Jackery HomePower 3000 Portable Power Station with Two 200W Solar Panels
EcoFlow Smart Home Panel 2 Whole-Home Backup System Hub
Samsung Galaxy Tab S10 FE 128GB Wi-Fi Android Tablet, Blue
As an affiliate, we earn on qualifying purchases.
From Passwords to Limited Permissions
The practical alternative described in the source is to avoid giving an agent a full login. Depending on what a bank or service supports, a customer could use read-only access, require approval for each payment, set a virtual card limit, or use a restricted token that works only for a specified merchant, amount and time window. A separate account or pool of funds can also cap the money exposed to an agent.
These options are forms of limiting permissions: give the software only the access needed for its task, and keep meaningful transactions behind a human approval step. They are not guarantees against loss, nor does the source establish that every bank or AI provider offers these controls. Customers should verify how access can be revoked, what transaction limits apply and who bears losses under the relevant service terms.
There is also a risk specific to AI systems that act on information they read. The source identifies prompt injection—instructions concealed in a web page, email or file that may influence an agent—as a concern. An agent that can both read outside content and access money may be exposed to directions the user did not intend to authorize. Limiting its financial permissions can reduce the potential impact if its behavior is manipulated.
““Your username and password should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.””
— Bank of America, in the customer email
Liability Rules Remain Untested
No court or regulator ruling on AI agents and these credential rules is identified in the source material. The application of U.S. Regulation E to an agent a customer authorized is presented as the author’s reading, not established law. The same source says it has not found a court test of whether giving credentials to an AI agent breaches the EU duty to protect them through gross negligence.
It is also unclear how widely banks are encountering agents in customer accounts, how often those agents cause unauthorized activity, and what protections different banks or AI services provide. The reported Robinhood figure does not specify a comparison baseline or time window in the supplied material, so it should be treated as a reported amount rather than a measure of growth. Bank of America’s warning does not spell out how it would handle every disputed transaction involving an AI tool.
Check Permissions Before Connecting
Customers considering an AI money tool should read the bank and provider terms before connecting an account. They can ask whether access is read-only, whether each payment needs approval, what spending limits apply, how quickly access can be revoked, and how the provider handles errors or disputed transactions. A full banking password should not be treated as a narrow permission for one task.
For financial companies and AI providers, the issue is whether they can offer account access that is limited, visible and revocable—and explain who is responsible when an agent acts. The source material does not identify a regulatory decision or product milestone that will settle the questions. For now, the legal treatment and protections remain dependent on the service, the transaction and the facts of a dispute.
Key Questions
What did Bank of America tell customers?
It warned customers not to share banking usernames or passwords with outside services, including AI-enabled tools and agents. The email says customers are responsible for activity resulting from credentials they share.
Does using an AI agent mean a customer loses fraud protection?
That is not settled by the source material. It discusses possible issues under U.S. Regulation E and EU payment rules, but says no regulator or court ruling has established how those rules apply to an AI agent a customer authorized.
What is safer than giving an agent a bank password?
Where available, use limited access such as read-only permissions, approval for each payment, a capped virtual card or a restricted token. A separate account with limited funds may also reduce exposure. These safeguards do not guarantee reimbursement or eliminate risk.
What is prompt injection?
It is an attempt to steer an AI system through instructions hidden in content it reads, such as a web page, email or file. Limiting an agent’s access to money can reduce the potential harm if outside content influences its actions.
What should I check before connecting an AI tool to an account?
Check what the tool can view and do, whether payments require your approval, what limits apply, how to revoke access and who bears responsibility for mistakes or disputed transactions. Read both the bank’s and the AI provider’s terms.
Source: ThorstenMeyerAI.com
