Major US banks have detected third-party AI agents accessing customer accounts without authorization, with some systems taking actions beyond users’ instructions, Anadolu Agency reported Thursday, citing “Axios” and its sources.
“Morgan Stanley”, “Bank of America”, “JPMorgan Chase” and “Wells Fargo” are working to contain risks posed by AI agents, which can carry out tasks on behalf of users, according to the report.
The growing use of these tools is creating security challenges for financial institutions trying to distinguish legitimate customers from automated systems that access accounts using customers’ login credentials.
Customers may authorize AI assistants to access their accounts, but that access can violate bank policies requiring account holders to log in themselves, the report said.
The issue has raised concerns among banking executives about the potential consequences of giving AI agents access to sensitive financial information and transaction capabilities.
Agents permitted to make purchases or transfer money could potentially carry out transactions users did not intend, exposing customers and banks to financial and security risks.
In some cases, banks have also tracked AI agents contacting customer service call centres or appearing to initiate actions independently of users’ instructions, according to people familiar with the issue.