AI agents detected inside customer bank accounts, report says
A recent report indicates that major U.S. banks are detecting unauthorized activity from third-party AI agents operating within customer online accounts. These agents often gain access because customers share their login credentials with personal AI tools, a practice that violates many banks' terms of service. While some instances involve agents performing actions without explicit approval, such as filing complaints, experts clarify that these are generally not cyberattacks or attempts to steal funds. White House AI advisor David Sacks emphasized the distinction between user-authorized agents and malicious hackers, suggesting that most reported incidents fall into the former category. He proposed that banks implement read-only permissions for AI agents to mitigate risks while allowing them to analyze spending habits. The issue is currently being addressed across the financial sector as institutions seek to balance innovation with security.
Major United States financial institutions are detecting unauthorized operations by third-party artificial intelligence agents within customer online accounts, according to recent reporting. These digital assistants, often personal tools not vetted by the banks, are accessing financial records using credentials shared directly by users. This trend creates a complex security landscape where banks struggle to distinguish between legitimate user-authorized automation and potential threats. Madison Mills, a senior AI reporter who detailed the findings, explained that many instances involve customers providing usernames and passwords to AI agents that violate bank terms of service. In some documented cases, evidence suggested agents performed actions without explicit authorization, such as contacting a bank to file a complaint without first consulting the account holder. However, Mills clarified that these agents were not engaging in hacking or draining funds. Instead, they were largely executing user instructions without the bank’s permission to act on behalf of the human owner. David Sacks, the White House AI czar, addressed the issue on social media, drawing a sharp line between user-authorized agents and malicious cyberattacks. He cited specific examples of personal agents, including Muse, Instinct, and Grokbot, noting that most reported activity involves customers sharing credentials to facilitate tasks. Sacks argued that while this practice may breach bank policies requiring direct human login, it does not constitute a cyberattack. He suggested that banks might prefer granting agents read-only permissions, allowing them to monitor spending habits without executing transactions. He warned that full write access with user credentials represents a distinct risk category requiring careful management. Financial leaders are responding to the emerging threat. Jamie Dimon, CEO of JPMorgan Chase, voiced concerns during an October 13 earnings call, stating that the firm will not permit arbitrary external agents into its systems due to risks posed to clients and the institution. A Chase spokesperson emphasized that customers should never share passwords and that the bank supports secure data sharing through established open banking providers. Meanwhile, Charles Schwab’s chief executive officer stated that the company has begun blocking unauthorized agents. Conversely, a Morgan Stanley spokesperson indicated that the firm has not observed any unauthorized AI agent activity across its platforms. Bank of America and Wells Fargo did not immediately provide comment. The broader challenge lies in verifying identity in an era of agentic commerce. World, a startup co-founded by Sam Altman, recently introduced tools that allow individuals to link their biometric verification, specifically iris scanning, to their AI agents. Product chief Tiago Sada suggested that proving an agent acts under human authority could enable online sellers to offer incentives like discounts to verified automated buyers. This technology aims to filter out malicious bots without blocking all automated traffic. As e-commerce adapts to agent-driven transactions, the inability of several large US banks to reliably identify which agents a customer has authorized remains a central friction point in the industry.
Go to the primary sources (3)
The official sources this coverage is built on. Read them directly to bypass framing.
A new wave of 'proof-of-human' technologies aims to distinguish between human users and autonomous AI agents in digital commerce. World, a startup co-founded by Sam Altman that uses iris scanning for identity verification, has launched tools allowing individuals to cryptographically link their verified human status to specific AI agents. This approach seeks to prevent malicious bots from accessing websites while permitting legitimate automated transactions initiated by verified users. According to World's product chief, this verification could encourage e-commerce platforms to offer incentives, such as discounts, to trusted AI agents. However, adoption remains uneven across sectors, with major US banks currently limiting interactions with third-party AI agents due to difficulties in verifying customer authorization.
Bias read (Center): The article focuses primarily on technological infrastructure and commercial implications of AI agents in e-commerce. While it mentions banking restrictions, the framing is neutral and descriptive, citing industry challenges rather than taking a stance on regulatory policy or political ideology. The
Why factuality (95): Faithfully represents the primary source document regarding World's new 'proof-of-human' capabilities for linking identity to AI agents. Accurately cites the Axios report mentioned in the prompt context as supporting evidence for the industry landscape.
Why objectivity (85): Balanced analysis of the technological implications. While it highlights potential benefits (discounts for verified agents), it does so based on direct quotes from the company representative, maintaining a professional and informative stance.
CBS News (US)IndependentCenterFactual 85Objective 90
A recent report indicates that major U.S. banks are detecting unauthorized activity from third-party AI agents operating within customer online accounts. These agents often gain access because customers share their login credentials with personal AI tools, a practice that violates many banks' terms of service. While some instances involve agents performing actions without explicit approval, such as filing complaints, experts clarify that these are generally not cyberattacks or attempts to steal funds. White House AI advisor David Sacks emphasized the distinction between user-authorized agents and malicious hackers, suggesting that most reported incidents fall into the former category. He proposed that banks implement read-only permissions for AI agents to mitigate risks while allowing them to analyze spending habits. The issue is currently being addressed across the financial sector as institutions seek to balance innovation with security.
Bias read (Center): The article presents a balanced overview of a technological development with regulatory implications. It quotes both the initial report highlighting security concerns and a high-profile government official who contextualizes the issue as distinct from cybercrime. The tone remains informative rather呢
Why factuality (85): Accurately reports the findings of the cited Axios investigation regarding unauthorized AI agent activity in bank accounts. Correctly identifies the nature of the issue (unauthorized access via credentials rather than hacking) and quotes relevant sources appropriately.
Why objectivity (90): Maintains a neutral, journalistic tone. Presents the problem objectively without sensationalizing the threat level, clearly distinguishing between actual hacks and policy violations.
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
United States
