🔍 Read the full analysis: Don’t Hand Over Your Bank Login: Guide To AI Money Safety on ThorstenMeyerAI.com
Get smart everyday buys delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to share their banking usernames and passwords with AI tools, saying customers are responsible for activity resulting from credential access. The warning comes as banks report concerns about AI agents logging into customer accounts and firms explore agent-led payments. Safer access controls may limit exposure, but how existing fraud protections apply remains unsettled.
Bank of America has warned customers not to give their usernames or passwords to AI tools or agents, saying customers who share credentials are responsible for activity resulting from that access. The warning, confirmed by a bank spokesperson to TechCrunch after a customer posted the email, comes as financial firms confront AI agents accessing accounts and making transactions.
The email, titled “Protecting your finances in the AI World,” says credentials “should never be shared with another person or provided to an outside service, including an AI-enabled tool or agent that offers to act on your behalf.” It adds that customers who share credentials are responsible for activity resulting from that access. The bank also said it is “excited about what AI used responsibly can deliver.”
The warning concerns a basic problem with password-based access: an agent that logs in with a customer’s credentials may appear to the bank as that customer. That can make it difficult to distinguish an authorized instruction from a stolen password or an agent acting beyond what the customer intended. The source article says TechCrunch reported on the email on October 27 and that Bank of America confirmed its authenticity.
The source also points to developments elsewhere in finance. It says Visa told investors that trust is a major barrier to AI agents making payments, while Robinhood reported that customers had placed more than $250 million into accounts that AI agents trade. The source does not provide a time period or comparison baseline for that figure. Robinhood’s separate account and spending limits may constrain activity, but the company said customers “assume all risk” for trades by AI agents, according to the source.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
For customers, the issue is not only whether an AI agent can make a mistake. Sharing a password can give software broad access while making the activity look like it came from the account holder. That may complicate fraud investigations, lead to an account being locked, or leave customers disputing who authorized a transaction.
The email’s responsibility warning is not itself a ruling on what legal protections apply. But it signals that customers should not assume ordinary fraud safeguards will cover transactions made through an agent they authorized to use their credentials. The consequences may depend on the facts, the provider’s terms and applicable law.
Limited permissions can reduce the potential harm. The source identifies read-only access, requiring approval for each payment, capped virtual cards, tokens restricted to a merchant, amount and time period, and separate accounts holding limited funds as alternatives to sharing a master password. These controls can restrict what an agent is able to do; they do not automatically settle who bears losses if something goes wrong.
Products Worth Considering
Dell XPS 13 9350 AI Professional Laptop 13.4 120Hz FHD+ Display
Brother TD-2020A 2‑Inch Direct Thermal Desktop Label Printer with USB
Dell XPS 13 9350 Laptop, 13.4 FHD+ Display, Intel Ultra 7 256V, 16GB DDR5, 1TB SSD
As an affiliate, we earn on qualifying purchases.
Banks Confront Agent Account Access
The warning follows reports that banks are encountering third-party AI agents inside customer accounts. According to the source, Axios reported on October 22, citing unnamed sources, that major U.S. banks had found agents logging in with customers’ passwords and were concerned they could not reliably tell whether the activity reflected customer intent. The source says banks have been blocking some unauthorized agents and revising terms, but does not name the banks or provide details of specific cases.
That reported activity helps explain why a password is a poor fit for delegating a narrow task. A login generally identifies the account holder, not the software’s permissions or the limits of a particular instruction. Industry efforts to let agents make purchases are developing at the same time, making access controls and clear customer approvals important questions for financial institutions and technology providers.
““If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.””
— Bank of America, in the customer email
Liability Rules Are Not Settled
It is not clear how consumer protections apply when an account holder deliberately gives credentials to an AI agent. The source’s author interprets U.S. Regulation E as potentially excluding transfers initiated by someone given access by the consumer, but says no regulator or court has ruled on how that provision applies to an AI agent or the company operating it. That is the author’s interpretation, not an established legal finding.
In the European Union, the source cites PSD2 requirements to take reasonable steps to protect personalized security credentials, and rules assigning losses in cases involving intent or gross negligence. Whether sharing a password with an AI agent meets that standard has not, according to the source, been tested in court. The precise protections may depend on jurisdiction, the circumstances and the relevant account terms.
Other details remain unresolved, including the scale of banks’ reported agent-access problem, which specific access controls financial providers will support, and how companies will handle disputed transactions. The source provides no detailed incident data or common industry standard for agent permissions.
Watch for Narrower Agent Permissions
Customers considering AI tools for financial tasks should check their bank’s rules and avoid sharing a primary login unless they understand the provider’s terms and the potential consequences. Where available, read-only access, transaction-by-transaction approval, capped cards or a separate account can limit an agent’s reach. A spending limit is a safety control, not a guarantee that a provider will reimburse losses.
Financial firms and AI providers will need to clarify how customers grant, restrict and revoke an agent’s access, and how transactions are recorded for review. Banks may continue updating their policies as agents enter accounts, while payment companies develop systems for agents to transact. The source does not identify a timetable for new standards or a resolution of the liability questions.
Key Questions
What did Bank of America tell customers?
It warned customers not to share their usernames or passwords with people or outside services, including AI-enabled tools and agents. The email says customers are responsible for activity resulting from shared credentials.
No. The email is not a court ruling or a complete statement of every customer’s rights. How protections apply may depend on the transaction, account terms and jurisdiction; the source says the specific legal treatment of AI agents has not been decided.
What is a safer way to let an AI agent handle a financial task?
Use limited access where a provider offers it, such as read-only permissions, approval before each payment, a capped virtual card, or an account holding only a limited amount. These measures restrict access but do not guarantee against loss.
Why can an AI agent’s login be hard for a bank to identify?
If the agent uses the customer’s own credentials, its activity may look like the customer’s—or like someone who stole the password. That can make it harder to determine whether a transaction was authorized and may prompt a bank to restrict account access.
Source: ThorstenMeyerAI.com
