🔍 Read the full analysis: What Should An AI Agent Be Allowed To Do With Your Money? on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to share banking usernames or passwords with AI tools, saying customers are responsible for activity resulting from that access. The warning comes as banks report concerns about third-party agents entering accounts and financial firms explore agent-driven payments and trading. How existing consumer protections apply to AI agents remains unsettled.
Bank of America warned customers not to share their banking usernames or passwords with AI tools or agents, saying customers are responsible for activity resulting from access they provide. The warning arrives as financial firms confront AI agents operating inside customer accounts and debate how to let software make payments without giving it broad control over a person’s money.
The email, titled “Protecting your finances in the AI World,” was posted by a customer on Bluesky and reported by TechCrunch on October 27. A Bank of America spokesperson confirmed to TechCrunch that the email was authentic. The message says credentials should never be shared with another person or an outside service, including an AI-enabled tool or agent acting on a customer’s behalf. It adds that customers who do share credentials are responsible for activity resulting from that access. The bank also said it is excited about what AI can deliver when used responsibly.
The warning comes amid signs that agents are already interacting with financial accounts. Axios reported October 22, citing unnamed sources, that major U.S. banks were finding third-party AI agents inside customer accounts, commonly using the customer’s own password. The report said banks often could not determine whether the activity reflected the customer’s intent. Separately, Visa told investors that trust is a major barrier to AI agents making purchases, while Robinhood said customers had placed more than $250 million into accounts that AI agents trade. These statements describe different products and concerns; they do not establish how often agents make unauthorized transactions.
The central distinction is between giving an agent a password that grants broad access and giving it a restricted way to complete a specific task. Possible controls include read-only access, requiring approval for each payment, limiting a virtual card’s spending, or issuing a token restricted by merchant, amount and time. A separate account with a capped balance can also limit potential losses. These measures can reduce access, but they do not by themselves determine who is legally responsible when an agent makes a mistake.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Broad Account Access Matters
A banking password can allow an agent to act with the same access as its customer. That makes it difficult for a bank to distinguish a customer-directed action from a stolen credential or an agent acting beyond its instructions. The potential consequences include unwanted transfers, fraud investigations or an account being locked while a bank checks activity.
Responsibility is also unsettled. In the United States, the source article notes that Regulation E excludes certain transfers initiated by someone to whom the consumer furnished access, unless the consumer has told the bank that access is no longer authorized. Applying that provision to an AI agent or its operator is an interpretation, not a settled legal ruling. In the European Union, payment rules require customers to take reasonable steps to protect personalised security credentials; whether sharing them with an AI agent amounts to gross negligence has not been tested in court, according to the source.
That uncertainty matters to anyone considering automated payments or trading. A technical safeguard, such as a spending cap, is not the same as a promise that a bank or platform will reimburse losses. Robinhood, which the source says uses a separate account and spending limits for agent trading, has told customers they assume all risk for trades made by AI agents. Customers need to understand both the permissions they grant and the terms governing mistakes or losses.
Products Worth Considering
DJI Osmo Pocket 3 Filter Bundle – Vlogging Camera with 1 CMOS Sensor and 4K/120fps
DJI Osmo Pocket 3 Creator Combo Vlogging Camera with Mic 2, 1 CMOS, 4K/120fps, 3-Axis Stabilization, 128GB Card
Bose QuietComfort True Wireless Earbuds with Active Noise Cancellation, Black
As an affiliate, we earn on qualifying purchases.
Banks Confront Agent Logins
The current debate is not only about AI systems choosing what to buy. It is also about how they authenticate. When an agent signs in with a customer’s standard credentials, it may appear to the bank as the customer or as someone who has stolen the password. Banks may not be able to tell whether the customer approved a particular action, and may block access if activity looks suspicious.
The source article also points to prompt injection as a security concern: instructions concealed in webpages, emails or files could influence an agent that reads them. The OWASP project lists prompt injection as a leading risk for AI applications. That risk is distinct from banking law, but it helps explain why broad, persistent account access can create exposure beyond a simple payment error.
Financial companies are testing different ways to bound agent activity, while consumers may already connect agents to accounts using ordinary passwords. The source identifies no court or regulator decision that settles how existing U.S. or EU consumer-protection rules apply to AI agents. Its legal discussion is the author’s reading of the rules, not legal advice.
““If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.””
— Bank of America, in the customer email confirmed as authentic to TechCrunch
Liability Rules Are Untested
No court or regulator ruling cited in the source settles whether an AI agent using a customer-provided password counts as someone furnished an account access device under U.S. Regulation E. Nor has a court, according to the source, decided whether giving credentials to an agent violates the EU duty to protect personalised security credentials or amounts to gross negligence. The legal outcome may depend on facts and the terms of the account or service.
The available reports also do not establish how many agents are accessing bank accounts, how often they cause unauthorized activity, or how banks distinguish approved actions from unwanted ones. Details of Visa’s proposed approach are not provided, and the source does not describe the full design or terms of Robinhood’s agent-trading accounts. A spending limit can cap some exposure, but it does not answer who bears a loss or how a dispute would be resolved.
Watch for Tighter Agent Controls
Customers considering an AI tool connected to money should read the bank’s and provider’s terms before granting access, including language about reimbursement, trading losses and responsibility for actions taken through the account. Where available, narrower permissions—such as read-only access, transaction-by-transaction approval, a merchant-specific token or a limited-balance account—avoid handing an agent the same credentials used for full account access.
For financial firms, the next steps will include deciding how to authenticate agents, restrict their authority and identify activity a customer has approved. Banks may revise account terms or access controls as the reported use of third-party agents develops. The source does not give a timeline for new rules, product standards or legal decisions, so the practical protections and liability arrangements remain in development.
Key Questions
What did Bank of America tell customers?
The bank warned customers not to share their usernames or passwords with outside services, including AI tools and agents. It said customers who share credentials are responsible for activity resulting from that access.
Does the warning mean an AI agent can legally use my account?
No. The email is a warning about sharing credentials, not a legal ruling that authorizes an agent or decides who would bear responsibility for a disputed transaction. The source says the application of relevant U.S. and EU rules to AI agents has not been tested in court.
What is safer than giving an agent my banking password?
Use restricted access where a provider offers it: read-only permissions, approval for each payment, a virtual card with a set limit, or a token limited to a merchant, amount and time window. A separate account with limited funds can also restrict potential exposure, though it does not settle liability.
Can an AI agent be influenced by information it reads?
Yes. The source describes prompt injection, in which instructions hidden in a webpage, email or file may steer an agent. That is one reason to limit an agent’s permissions and require approval for consequential actions.
Who pays if an AI agent makes an unwanted transaction?
That remains uncertain and may depend on the account terms, the facts and applicable law. Bank of America says customers are responsible for activity resulting from credentials they share; Robinhood says customers assume risk for AI-agent trades, according to the source. Neither statement resolves every possible dispute or establishes a general legal rule.
Source: ThorstenMeyerAI.com
