🔍 Read the full analysis: Let AI Handle Money While Keeping Your Bank Password Private on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Bank of America has warned customers not to share their banking usernames or passwords with AI tools, saying customers are responsible for activity resulting from that access. The warning comes as reports describe banks finding AI agents inside customer accounts and financial firms explore agent-driven payments and trading.
Bank of America has warned customers not to share their banking usernames or passwords with AI assistants, saying customers are responsible for activity resulting from that access. The email, confirmed as authentic by a bank spokesperson to TechCrunch, comes as financial institutions grapple with AI agents accessing accounts and companies test software that can make payments or trades.
The email, titled “Protecting your finances in the AI World,” says login credentials should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent acting on a customer’s behalf. It adds that customers who share credentials are responsible for activity resulting from that access. Bank of America also said it is “excited about what AI used responsibly can deliver.” TechCrunch reported the email on October 27 after a customer posted an image of it on Bluesky; a bank spokesperson confirmed its authenticity to the publication.
The warning comes amid wider use of AI in financial services. Axios reported on October 22, citing unnamed sources, that major U.S. banks were finding third-party AI agents inside customer accounts, generally using the customer’s own password. The report said banks often could not distinguish activity a customer intended from activity they had not authorized. On the same Tuesday as the bank warning, Visa told investors that trust was the main barrier to AI agents making purchases, while Robinhood said customers had placed more than $250 million into accounts used for AI-agent trading. Those figures and statements indicate activity in the sector, but do not establish how often agents make errors or cause losses.
One central concern is that a password grants broad access. An agent logged in with a customer’s credentials may appear to the bank as the customer or as someone who has stolen the password. That can make it harder to assess disputed activity, and an institution may block access if it suspects fraud. The source article also describes prompt injection as a risk: instructions embedded in pages, emails or files an agent reads may influence what it does. The OWASP project lists prompt injection as a leading risk for AI applications.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
The Risks of Giving Agents Full Access
The warning matters because using an agent through a personal login can blur who initiated a transaction. A customer may have authorized the software to help with one task, while the bank sees only activity under the customer’s credentials. If a payment or trade goes wrong, the customer, bank and AI provider may disagree about whether the action was authorized and who should bear the loss.
Consumer protections may not settle that question automatically. In the United States, Regulation E excludes from its definition of an unauthorized electronic fund transfer one initiated by someone the consumer furnished with an access device, unless the consumer has told the financial institution that the person is no longer authorized. Whether that provision applies to an AI agent or its operator has not been resolved by a regulator or court, according to the source article. In the European Union, payment rules require customers to take reasonable steps to protect personalized security credentials; how those requirements apply to credentials given to an AI agent has not been tested in court, according to the same account.
Safer access design can limit the damage, though it does not by itself decide liability. Options described in the source include read-only permissions, requiring approval for each payment, setting spending limits on virtual cards, or using narrowly scoped tokens restricted by merchant, amount or time. A separate account with limited funds can also contain potential losses. Customers still need to read the terms: Robinhood, despite using a separate account and spending limits, reportedly says customers assume all risk for trades made by AI agents.
Products Worth Considering
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
DJI Osmo Pocket 3 Filter Bundle – Vlogging Camera with 1 CMOS Sensor and 4K/120fps
Bose QuietComfort Wireless Bluetooth Headphones with Active Noise Cancellation, Mic, USB‑C Charging, Deep Bass, 24‑Hour Battery – White Smok
As an affiliate, we earn on qualifying purchases.
Banks Confront Agent Logins
The immediate development is not a new consumer protection rule or a ban on AI agents. It is a customer warning from Bank of America, issued as banks face activity by outside agents that use credentials customers have supplied. The bank’s email cautions against that practice and states how it views responsibility for resulting activity.
Agent access is different from a customer using an AI tool to ask questions or summarize financial information. When software logs in with a bank password, it may gain the same access available to the account holder. More limited permission systems can grant an agent a narrower task, but availability and protections vary by provider. The source material does not identify which banks currently offer these controls or establish a standard for AI-agent permissions.
The legal discussion also needs care. Regulation E and the EU’s Payment Services Directive contain rules about account access and credential security, but the article’s application of those provisions to AI agents is an interpretation, not a court ruling or regulator guidance. Customers should not treat the legal outcome as settled, and the source explicitly says its discussion is not legal advice.
““If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.””
— Bank of America, in the customer email confirmed as authentic to TechCrunch
Liability Rules Remain Untested
No court or regulator ruling cited in the source settles whether giving an AI agent bank credentials counts as furnishing an access device under U.S. Regulation E, or how EU credential-protection duties apply to this situation. The source article presents its legal analysis as the author’s reading of the rules, not legal advice. The terms of individual bank accounts and AI services may also differ.
It is also unclear how widespread agent access is, how many customers have experienced unauthorized payments or account lockouts, and whether reported agents were operating with customers’ consent. The Axios report cited unnamed sources, while the figures attributed to Visa and Robinhood do not provide enough detail to show typical outcomes, losses or the number of users involved. Bank of America’s email does not specify what recourse a customer would have in a particular dispute.
Watch for Safer Permission Controls
Customers considering an AI financial tool can check whether it supports read-only access, transaction-by-transaction approval, spending caps or limited-use credentials, rather than supplying a primary bank password. They should also review the bank’s and provider’s terms to see who is responsible for actions taken by the agent and how to revoke access.
For financial institutions and payment companies, the next developments to watch are clearer ways to distinguish customer-directed agent activity from credential misuse and more narrowly limited permissions for software. The source material does not identify a regulatory decision, product launch or deadline that would resolve these issues. Until one emerges, both the legal treatment and the scale of potential consumer losses remain unsettled.
Key Questions
What did Bank of America tell customers?
The bank warned customers not to share their usernames or passwords with people or outside services, including AI-enabled tools and agents. It said customers who share credentials are responsible for activity resulting from that access.
No ruling is identified in the source material. How U.S. and EU payment rules apply to an AI agent using customer-provided credentials remains legally untested, according to the source article.
How can an AI agent get more limited access?
Possible safeguards include read-only permissions, approval before each payment, a virtual card with a spending limit, or a token restricted to a particular merchant, amount or time period. Availability depends on the financial institution and service.
Does a spending limit remove the customer’s risk?
No. A spending limit may constrain an agent’s activity, but it does not settle who is responsible for a disputed transaction. The source reports that Robinhood says customers assume all risk for AI-agent trades, despite a separate account and spending limits.
Source: ThorstenMeyerAI.com
