Field noteOct 24, 20262 min read1 source

US banks move to restrict third-party AI agents from accessing customer accounts

In one minute

Citi, Wells Fargo, Bank of America and JPMorgan Chase have taken steps to limit third-party AI agents’ access to their customer platforms, USA TODAY reported on October 23, 2026.

What changed: Same event as Scoop: Unvetted AI agents are accessing U.S. bank accounts

Citi said external AI agents and assistants may not log into customer accounts or transact directly; certain Citi-approved open-banking providers can receive limited, read-only account access.

Bank of America is restricting agent access to consumer deposits, according to comments from CEO Brian Moynihan. JPMorgan Chase is blocking outside agents from customer-account information. Wells Fargo said it has blocked unauthorized agents. Its updated online-access agreement takes effect November 24 and says customers who permit an AI agent or other third party to use the service are responsible for supervising it; transactions by authorized representatives, including unwanted ones, can be treated as authorized.

Charles Schwab said it is blocking between “tens and twenties” of attempts by major AI agents to access and manipulate client funds. Schwab’s own assistant, Charley, can answer questions and complete routine tasks but cannot execute trades.

The report does not establish that AI agents have hacked customer accounts or caused particular losses. It also does not establish a common banking protocol for identifying agents, verifying customer authority, or permitting transactions.

Evidence / sources

  1. 1usatoday.com/story/money/2026/10/23/banks-move-to-limit-ai-agent-access/92385119007
All Field Notes

Next reads

Read next

Open the graph
  1. 01topicAgent SecurityExplore the agent-security topic hub.
  2. 02topicSandboxExplore the sandbox topic hub.
  3. 03archiveField NotesOpen the latest editorial analysis.
  4. 04source ledgerSource LedgerInspect the public source evidence graph.
Who read this page?Machine requests, hidden until opened

Loading the privacy-safe route aggregate...

Open the JSON contract