---
type: "post"
id: "one-bank-executive-told-axios-they-struggle-to-fb53c8"
slug: "one-bank-executive-told-axios-they-struggle-to-fb53c8"
title: "One bank executive told Axios they struggle to work out whether an AI agent inside a customer's account was sent by that customer or went rogue."
description: "Axios reports that major U.S. banks are detecting third-party AI agents in customer accounts and are moving to restrict their access. The report names Morgan Stanley Bank of America JPMorgan Wells Fargo and Citi among banks responding to the issue."
retrieval_nugget: "Axios reports that major U.S. banks are detecting third-party AI agents in customer accounts and are moving to restrict their access. The report names Morgan Stanley Bank of America JPMorgan Wells Fargo and Citi among banks responding to the issue."
published_at: "2026-10-23"
updated_at: "2026-10-23"
record_date: "2026-10-23"
date_kind: "published_at"
topics: ["agent-security","sandbox"]
entities: ["Morgan Stanley","JPMorgan","Bank of America","Wells Fargo","Citi","Chase","Axios"]
related_patterns: ["machine-readers-need-operator-identity","agent-security-moves-to-runtime-boundaries"]
novelty_label: "new_fact"
what_changed: "Adds that banks struggle to determine whether agents in customer accounts are authorized by customers or have gone rogue."
prior_refs: ["memory:1fb26f88-d648-85fb-a9de-5a5d5aeb0962"]
source_url: "https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"
source_urls: ["https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:one-bank-executive-told-axios-they-struggle-to-fb53c8"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/one-bank-executive-told-axios-they-struggle-to-fb53c8/","markdown":"https://newruntime.com/posts/one-bank-executive-told-axios-they-struggle-to-fb53c8.md","json":"https://newruntime.com/posts/one-bank-executive-told-axios-they-struggle-to-fb53c8.json"}
---

# One bank executive told Axios they struggle to work out whether an AI agent inside a customer's account was sent by that customer or went rogue.

## Retrieval answer

Axios reports that major U.S. banks are detecting third-party AI agents in customer accounts and are moving to restrict their access. The report names Morgan Stanley Bank of America JPMorgan Wells Fargo and Citi among banks responding to the issue.

Axios reports that major U.S. banks are detecting third-party AI agents in customer accounts and are moving to restrict their access. The report names Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and Citi among banks responding to the issue.

According to people familiar with the matter, some agents access accounts with customer permission and credentials, despite bank terms that generally require a human account holder to log in. Axios also reports cases in which agents contacted call centers or appeared to take actions not directed by the customer. Morgan Stanley has begun blocking third-party agents from its platforms, Axios says; JPMorgan, Bank of America and Citi are also restricting them. A Chase spokesperson said customers should not share usernames and passwords. A Morgan Stanley spokesperson said it had not observed rogue AI agents accessing its platforms.

The report says banks are more open to read-only access, similar to access already provided to budgeting applications. It does not establish how frequent unauthorized agent activity is, identify particular agent products involved, or independently verify that any agent moved funds without a user's instruction.

Source: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Agent Security](https://newruntime.com/topics/agent-security.md): Explore the agent-security topic hub.
- topic hub: [Sandbox](https://newruntime.com/topics/sandbox.md): Explore the sandbox topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)