Safety · 2026-10-27
Don't give your AI assistant your bank password: risks and responsibility
Bank of America urges customers not to share their bank login and password with AI assistants or agents, because customers are responsible for activity carried out through that access.
What the bank said
US bank Bank of America sent customers an email titled "Protecting your finances in the AI World." In it, the bank asks people never to share their username and password with another person or an outside service, including "an AI-enabled tool or agent that offers to act on your behalf."
Personal AI tools for managing money are becoming more popular, and many people are willingly giving them access to their bank accounts. The bank sees this as a risk, which is why it decided to warn customers directly.
Why it is risky
First, an AI assistant may do something with your money without your knowledge. Second, the bank may notice suspicious activity, decide someone is raiding your account, and lock you out. Third, the AI assistant itself may have a security flaw that leaks your banking data elsewhere. Then hackers who target money could get into your account.
The bank also reminds customers that if they do share their login details, they are responsible for everything done through that access. "If you do share your credentials," the email says, "keep in mind that you're responsible for activity resulting from that access."
Context
Banks are still working out how AI agents should fit into finance. According to Axios, banks are dealing with unauthorized agents trying to access customers' money. Payment providers are also still looking for a safe way to let people manage accounts through AI tools, for example for so-called agentic payments, where an agent buys something on its own at the best price or at the right time.
Bank of America did not immediately respond to a request for comment about the email. Account agreements at most banks hold customers responsible for anyone they give their login details to.
Useful from the source
- Axios: AI agents and unauthorized bank account access — An Axios article on banks dealing with unauthorized AI agents trying to access customers' accounts.
- U.S. Bank digital services agreement — An example of a bank digital services agreement where the customer is responsible for actions taken through access they granted.
Sources: 🔗 TechCrunch — AI