{"id":19175,"date":"2026-10-23T08:21:09","date_gmt":"2026-10-23T15:21:09","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=19175"},"modified":"2026-10-23T08:21:09","modified_gmt":"2026-10-23T15:21:09","slug":"unvetted-ai-agents-are-accessing-us-bank-accounts","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/10\/23\/unvetted-ai-agents-are-accessing-us-bank-accounts\/","title":{"rendered":"Unvetted AI Agents Are Accessing US Bank Accounts"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">It boggles my mind how people are playing with agentic AI which is unvetted. And many say the best opensource models you run on your own equipment come from China, not a security concern at all. I wouldn&#8217;t even try a popular Chinese version of Linux. My bank has already sent out new terms of service addressing the use of agentic AI, and the interesting part is how will they address problems with lost funds they can&#8217;t recover. And giving these AI agents access to your computer, accounts&#8230; is such a security nightmare no matter what they say about guardrails. And people with no programming experience vibe coding and using apps is also a security nightmare, as you don&#8217;t know what is lurking within the code. And the same for lazy developers using unvetted AI code within their applications and operating systems. Consequently, the WEF was warning us and running simulations for major cyber events, and AI agents with irresponsible use and access is the perfect cover for a major false flag and locking down the internet and usher in digital ID with total state control. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.axios.com\/2026\/10\/22\/ai-agents-banks-unauthorized-accounts-access#selection-499.0-720.0\" target=\"_blank\" rel=\"noopener\">https:\/\/www.axios.com\/2026\/10\/22\/ai-agents-banks-unauthorized-accounts-access#selection-499.0-720.0<\/a><\/p>\n\n\n<div class=\"wp-block-ub-divider ub_divider ub-divider-orientation-horizontal\" id=\"ub_divider_c1ab03e0-7882-45ce-94ef-54b5e004c60a\"><div class=\"ub_divider_wrapper\" style=\"position: relative; margin-bottom: 2px; width: 100%; height: 2px; \" data-divider-alignment=\"center\"><div class=\"ub_divider_line\" style=\"border-top: 2px solid #ccc; margin-top: 2px; \"><\/div><\/div><\/div>\n\n\n<p class=\"wp-block-paragraph\">By Madison Mills<\/p>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img decoding=\"async\" src=\"https:\/\/images.axios.com\/mDRoKUMcDmnE9ld-90srM2CKSu0=\/0x0:1920x1080\/1920x1080\/2026\/10\/21\/1792610587634.jpeg?w=3840\" alt=\"Illustration of a computer cursor entering a bank vault\" style=\"aspect-ratio:1.7777777777777777;width:1920px;height:auto\"\/><figcaption class=\"wp-element-caption\">Illustration: Sarah Grillo\/Axios. Stock: Getty Images<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Major U.S. banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting to take actions that appear to be independent of user instructions, sources tell Axios.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Why it matters:<\/strong> <a href=\"https:\/\/www.axios.com\/2026\/09\/26\/openai-anthropic-thousands-ai-security-incidents\">AI agents<\/a> are becoming a nightmare for America&#8217;s banks, making their way into banking systems faster than financial institutions can respond.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The difficulty in distinguishing between a human and an unauthorized bot is forcing banks to block the technology and rapidly rewrite their terms of service.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Driving the news:<\/strong> Banks including Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and others are racing to contain agent risks. Some are aware of unauthorized access, people familiar with the issue said.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>These are generally situations when an agent or AI assistant accesses a human&#8217;s account with the user&#8217;s permission and login credentials. Even if permitted by the user, this goes against the guidelines of most banks requiring that humans log in to their own accounts.<\/li>\n\n\n\n<li>This presents <a href=\"https:\/\/connect.cefpro.com\/article\/view\/wall-street-banks-warn-rogue-ai-agents-threaten-security\" target=\"_blank\" rel=\"noopener\">significant security risks<\/a>: Banking executives fear the steps agents with login access might take, especially if a user has granted purchase authority or the ability to shift funds.<\/li>\n\n\n\n<li>In other instances, some banks have tracked activity when agents \u2014 programmed to fulfill requests or complete tasks on a user&#8217;s behalf \u2014 contact call centers or appear to take actions independent of user instructions, the people said.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What they&#8217;re saying:<\/strong> Bank executives described the situation as horrifying, with one official saying the industry has grave concerns about agents gaining access to customer accounts and taking steps that could impact user finances.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>State of play:<\/strong> The concerns are at the root of the decision by several banks to restrict third-party AI agent access, the people said.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Morgan Stanley has begun blocking third-party agents from accessing its platforms, sources familiar with the decision said.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.americanbanker.com\/news\/jpmorgan-warns-of-risks-to-consumers-who-rely-on-ai-agents\" target=\"_blank\" rel=\"noopener\">JPMorgan<\/a>, Bank of America and Citi are also <a href=\"https:\/\/www.ft.com\/content\/f49c8e39-f07f-4177-9948-aabe55e5ed91?syn-25a6b1a6=1\" target=\"_blank\" rel=\"noopener\">restricting agents<\/a>.<\/li>\n\n\n\n<li>A Chase spokesperson said customers should not give their usernames and passwords to anyone. A Morgan Stanley spokesperson said the bank hasn&#8217;t observed instances of &#8220;rogue AI agents accessing our platforms.&#8221;<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Zoom out:<\/strong> Most banks have authorized or are moving in the direction of allowing <a href=\"https:\/\/finance.yahoo.com\/news\/us-banks-limit-ai-agents-113229223.html\" target=\"_blank\" rel=\"noopener\">read-only access<\/a>, which should allow agents to see customer financial information without taking action.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Banks already grant such access to third-party apps like Quicken for budgeting and other activities.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Reality check:<\/strong> Several industry and bank executives told Axios they recognize the need to find a middle-ground with AI agents.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Customers will want to use these agents going forward, which banks recognize.<\/li>\n\n\n\n<li>But for now, the risks of being too permissive are too high.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Threat level:<\/strong> Many banks are broadly not able to parse whether agent account activity is user-directed, sources said.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>One bank executive told Axios they struggle to differentiate between agents, as well as whether an agent has been authorized by a user or has gone rogue and gained access to a customer account.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What we&#8217;re watching:<\/strong> On one hand, banks are best positioned to respond to the <a href=\"https:\/\/www.reuters.com\/legal\/legalindustry\/wall-street-banks-finance-adopt-ai-risks-mount-both-fronts-2026-10-14\/\" target=\"_blank\" rel=\"noopener\">threats and opportunities<\/a> of AI given their cash on hand and experience as critical infrastructure.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>But money isn&#8217;t necessarily enough to solve this problem, one source said, because of how quickly the technology is developing and revealing new weaknesses in real time.<\/li>\n\n\n\n<li>Banks are <a href=\"https:\/\/www.businessinsider.com\/bankers-shoring-defences-against-rogue-ai-agents-2026-10\" target=\"_blank\" rel=\"noopener\">investing<\/a> in preventing worst-case scenarios, but they are also preparing in case they do happen, including with &#8220;day after&#8221; scenario planning that would allow them to quickly secure or restore customer access, sources said.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The bottom line:<\/strong> <a href=\"https:\/\/www.axios.com\/2026\/09\/19\/axios-ai-velocity-simplify\">The rapid pace of AI advancement<\/a> is becoming a security nightmare for America&#8217;s financial institutions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It boggles my mind how people are playing with agentic AI which is unvetted. And many say the best opensource models you run on your own equipment come from China, not a security concern at all. I wouldn&#8217;t even try a popular Chinese version of Linux. My bank has already sent out new terms of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,7],"tags":[],"class_list":["post-19175","post","type-post","status-publish","format-standard","hentry","category-tech","category-world"],"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/19175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=19175"}],"version-history":[{"count":1,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/19175\/revisions"}],"predecessor-version":[{"id":19176,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/19175\/revisions\/19176"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=19175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=19175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=19175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}