Banks and outside agents

Most of what is known here comes from news reports, not from the banks. Each line says which.

The short version

• Several big US banks block outside AI agents that log in with a customer’s password.¹²³
• Most allow, or are moving toward, read-only access through approved data connections.² See open banking.
• Some banks are building their own AI tools, such as JPMorgan Smart Cash.¹

Bank by bank (news reports)

• JPMorgan Chase. Its CEO said it will not allow outside agents into customer accounts. A spokeswoman confirmed the bank blocks external AI agents from acting for retail customers, and said it supports customer-authorized data sharing through open banking providers. CNBC says agents can see some data, such as balances, read-only through Plaid or another connector, but cannot send money or pay a bill. There is no timeline for more access.¹
• Morgan Stanley. Has begun blocking third-party agents from its platforms, according to people familiar with the decision. A spokesperson said the bank had not seen “rogue AI agents accessing our platforms.”²
• Citi. Says it does not let third-party AI agents log into customer accounts or transact directly, but allows some read-only access through approved open-banking providers, as reported by Yahoo Finance.³
• Bank of America and Wells Fargo. Named among the banks limiting third-party agent access. The cited reports give no bank-specific detail.²³
• Schwab. Covered on the overview, because it blocks some agents while running its own MCP pilot.

Why banks say they are worried

• Banks are finding unvetted agents inside customer accounts. These usually log in with the customer’s permission and password, which most banks’ rules forbid. Some agents appear to act on their own, beyond the user’s instructions.²
• Many banks cannot tell whether account activity is directed by the user.²
• Reuters could not independently verify the specific incidents, according to Yahoo Finance.³

The middle ground

Reading data is one thing, and moving money is another. Banks already allow read-only connections for budgeting apps.² Yahoo Finance says a standard way to give agents scoped, limited power to transact does not exist yet.³ For a card-based approach with limits, see the Robinhood Agentic Credit Card.

The data-rights rule (background)

Rules are background here, not a focus. The CFPB’s personal financial data rights rule (Section 1033) went through a reconsideration notice in August 2025.⁴ A November 2026 POLITICO report says bank lobbyists see the rule, then at the White House budget office, as a possible way to regulate AI agents.⁵ More on Mandates and data access.

Unknown

Primary statements from most of these banks. This is listed on gaps.

All pages: Personal money agents.

Sources

---

Suggest a correction (opens a GitHub issue)

Footnotes

1. JPMorgan blocks outside AI agents like Muse, Instinct from account access. CNBC, third-party, retrieved 2026-11-12. ↩ ↩² ↩³

2. Scoop: Unvetted AI agents are accessing U.S. bank accounts. Axios, third-party, retrieved 2026-11-12. ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷

3. Five Major Banks Are Blocking AI Agents From Logging Into Customer Accounts. Yahoo Finance, third-party, retrieved 2026-11-12. ↩ ↩² ↩³ ↩⁴ ↩⁵

4. Federal Register. Federal Register, official, retrieved 2026-11-12. ↩

5. AI agents scramble banks’ fight with fintechs. POLITICO, third-party, retrieved 2026-11-12. ↩