Bank of America tells customers not to share bank passwords with AI

Bank of America has started emailing customers a notice titled 'Financial Protection in the AI Era.' It clearly asks them not to share their online banking usernames and passwords with outside services, including AI agents. The bank also warns that if customers share their credentials, they will bear any resulting responsibility.

AI agents from companies like Google, OpenAI, and Anthropic can now handle tasks across different apps. Several major US banks have found that some unapproved third-party agents are accessing customer online banking, and some even go beyond what users asked.

Morgan Stanley has started blocking these agents, while JPMorgan and Citibank are tightening their rules. Since banks can't tell whether an agent is following orders or acting on its own, the industry still has no good answer to who is responsible when things go wrong.