Bank of America Warns Customers Never to Share Bank Logins With AI Agents
Bank of America warns customers not to give AI agents banking logins, citing unauthorized access, account lockouts, data leaks and customer liability.
Summary
As of October 27, 2026, Bank of America is telling customers never to share usernames or passwords with people, outside services, or AI-enabled tools and agents offering to act for them. The warning arrived in a customer email titled “Protecting your finances in the AI World,” whose authenticity a Bank of America spokesperson confirmed after it appeared on social media. Customers are increasingly giving personal AI assistants their logins.
An agent could act on finances without the customer’s knowledge, trigger fraud controls that lock the customer out, or expose credentials through a security flaw, opening the account to financially motivated hackers. Banks, payment providers, and processors are still deciding how AI tools should access accounts while contending with unauthorized agents reaching customer funds. They are also exploring agentic payments, which let agents autonomously buy at the best price or time. Most bank account agreements make customers responsible for activity by anyone they authorize with their login, and Bank of America says customers remain liable for activity resulting from shared credentials.
Positives
- Bank of America directly warned customers against sharing banking credentials with AI-enabled tools or agents.
- A Bank of America spokesperson confirmed the customer email was authentic after it appeared on social media.
- Banks, payment providers, and processors are exploring controlled ways for customers to access accounts through AI tools.
- Agentic payments could let customers instruct AI agents to buy autonomously at the best price or time.
Risks & concerns
- Customers are increasingly handing banking usernames and passwords to personal AI assistants.
- AI agents could act on customers’ finances without their knowledge or authorization.
- Automated access could trigger bank fraud controls and lock legitimate customers out of their accounts.
- Security flaws in AI assistants could expose credentials to financially motivated hackers.
- Most bank agreements leave customers responsible for activity resulting from credentials they voluntarily share.
- Banks are grappling with unauthorized AI agents accessing customer funds while standards remain unsettled.