🔍 Read the full analysis: Give AI Agents Guardrails For Money Tasks, Not Your Password on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
Bank of America has warned customers not to give banking usernames or passwords to AI tools, saying customers are responsible for activity resulting from shared credentials. The warning comes as financial firms report growing agent-related activity, but the legal treatment of AI agents and the protections customers retain are not settled.
Bank of America has warned customers not to share their banking usernames or passwords with AI agents, saying customers who do so are responsible for activity resulting from that access. The warning comes as financial firms confront AI tools that can act inside financial accounts, raising questions about security, customer liability and how to limit an agent’s authority.
The bank’s email, titled “Protecting your finances in the AI World,” says credentials should never be shared with another person or an outside service, including an AI-enabled tool or agent acting on a customer’s behalf. Bank of America also said it is “excited about what AI used responsibly can deliver.” A customer posted the email on Bluesky; TechCrunch reported on it on October 27, and a bank spokesperson confirmed the email was authentic to the publication.
Financial firms are discussing agents’ growing role in money management. On October 28, Visa told investors that trust is a major barrier to AI agents making purchases, according to the source report. Robinhood said customers had placed more than $250 million into accounts that AI agents trade. That figure describes funds in those accounts; the source provides no comparison period or baseline for interpreting it as a growth rate.
The source report recommends giving an agent less access than a full account login: for example, read-only permissions, payment-by-payment approval, spending limits, or a restricted virtual card. It says Robinhood has created a separate account and spending limits for agent-led trades, while also warning customers that they “assume all risk” for those trades. Limits can reduce the scope of a mistake, but they do not by themselves settle who bears losses.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
The Cost of Giving Agents Access
A bank password can function as a master key, allowing an agent to act with much of the same authority as the account holder. The bank may not be able to distinguish a customer-directed action from one made by an agent, or from activity by someone who has obtained the credentials. That can leave customers facing both unwanted transactions and account lockouts.
There is also a potential gap between technical safeguards and legal protection. The source report interprets US and EU rules as raising possible liability issues when a customer gives credentials to software, but it says courts and regulators have not resolved how those provisions apply to AI agents. That is the writer’s interpretation, not a legal ruling or legal advice. Customers should not assume that an agent’s mistake will be treated the same way as fraud by a stranger.
Reducing access can help contain harm: an agent permitted to read information or spend up to a defined amount has less power than one using a full login. But the source material also cautions that spending controls do not automatically transfer liability. Customers need to understand the account provider’s terms and what approval steps remain active before connecting an agent.
Popular right now
Vitamix Propel Series 750 Professional-Grade Blender, 4 Programs, Black
LG C2 Series 65-Inch OLED evo 4K Smart TV (OLED65C2PUA, 2022)
eufy E25 Robot Vacuum and Mop Combo with HydroJet Roller Mop
As an affiliate, we earn on qualifying purchases.
Banks Confront Account-Level Agents
The Bank of America message follows a report by Axios on October 22, citing unnamed sources, that major US banks were finding third-party AI agents entering customer accounts, often through the customer’s own password. According to that report, banks could have difficulty determining whether the account activity reflected the customer’s intent. The claims about banks’ findings are attributed to Axios’s sources, rather than to a public bank-by-bank accounting.
The distinction between an agent and a human user matters because password-based access can make their activity look alike to a financial institution. The source report says banks have been blocking agents they consider unauthorized and revising terms in response. Bank of America’s email is a direct customer warning, while the broader description of industry activity comes from reporting and company statements.
The source article also points to prompt injection: instructions embedded in content an agent reads, such as a webpage, email or file, may steer its behavior. It identifies this as a risk listed by the OWASP project. That concern is relevant to financial agents because they may process outside information while carrying out a task, but the provided material does not report a specific prompt-injection incident involving a customer’s bank account.
“Your username and password “should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.””
— Bank of America, in its customer email
Liability Rules Remain Untested
It is not yet clear how existing consumer-protection rules apply when a customer gives an AI agent access and the agent initiates a transaction the customer did not intend. The source author says no regulator or court has ruled on the application of the cited US provision to an AI agent, and that the EU question of whether sharing credentials could amount to gross negligence has not been tested in court. Those are the author’s readings of the laws, not settled legal conclusions.
The source material does not specify the terms of every bank or brokerage account, the precise permissions available to different agents, or how often agent-led activity has caused losses or account restrictions. It also provides no baseline or time window for Robinhood’s reported $250 million figure. The extent of customer exposure and the protections available will depend on facts and account terms that are not detailed in the report.
Watch for Tighter Agent Controls
Customers considering an AI financial tool should review the provider’s terms and use the narrowest permissions available, such as read-only access or a spending cap, rather than sharing a primary banking password. They should check whether each payment requires approval and whether the service clearly explains responsibility for errors or unauthorized activity.
Financial institutions may continue adjusting account terms and controls as agent use grows, but the source material does not identify a specific regulatory decision or product deadline. The next developments to watch are clearer bank policies, more limited authorization options, and legal or regulatory guidance on responsibility when an AI agent acts through a customer account.
Key Questions
What did Bank of America tell customers?
The bank said customers should not share their banking username or password with another person or an outside service, including an AI agent. It warned that customers who share credentials are responsible for activity resulting from that access.
Why can sharing a password create risk?
A password may give an agent broad account access and make its activity difficult for a bank to distinguish from actions by the customer. A mistake or misuse could lead to unwanted transactions or an account being flagged and restricted.
Does the warning settle who pays for an agent’s mistake?
No. The source report says the application of relevant US and EU rules to AI agents has not been tested by courts or regulators. The bank’s warning states its position, but it does not establish how every dispute would be resolved.
What are safer ways to let an agent handle money?
The source report suggests narrower permissions, including read-only access, approval for each payment, a virtual card with a spending limit, or a separate account with limited funds. These controls can limit access but do not necessarily determine liability.
What does Robinhood’s $250 million figure mean?
Robinhood said customers had put more than $250 million into accounts that AI agents trade. The source does not provide a time window or comparison baseline, so the figure should not be treated as a growth rate.
Source: ThorstenMeyerAI.com
