Skip to content
Bramble

Technology

Bank of America tells customers they are responsible for AI agents given their logins

Bank of America emailed customers urging them not to share banking credentials with AI agents, warning they are responsible for activity resulting from that access. Coverage places it amid wider bank restrictions on third-party AI agents.

2 outlets · 0L · 2C · 0R First reported Account updated
Image: TechCrunch
Image: ZDNET

1 / 2

The story, neutrally told

Centre · 2Bank of America emailed customers, in a message titled “Protecting your finances in the AI World,” urging them never to share their username and password with another person or an outside service. Centre · 1The email specifically named AI-enabled tools or agents that offer to act on a customer's behalf, and said that customers who do share their credentials are responsible for activity resulting from that access. Centre · 1TechCrunch said that sharing logins with an AI assistant risks the agent acting on finances without the customer's knowledge, the bank flagging the activity as an account takeover and locking the customer out, or a security flaw in the assistant leaking the credentials. It added that account agreements at most banks hold customers responsible for anyone they give their login to.

Centre · 1TechCrunch reported that Bank of America did not immediately respond to a request for comment on the email. Centre · 1ZDNET described Bank of America as the second-largest US bank and said the message follows a trend in which banks including Citi, Morgan Stanley and Wells Fargo are restricting third-party AI agent access. Centre · 1ZDNET, citing an Axios report from the previous week, said AI agents have been gaining unauthorized access to users' bank accounts and acting against user instructions. It said JPMorgan has blocked the agents Muse and Instinct, and quoted CEO Jamie Dimon on an earnings call saying the bank will not allow just any outside agent inside because it is too risky for clients and the bank.

Centre · 1ZDNET also highlighted privacy concerns about Meta's Muse agent, which it said requests logins and passwords at setup, can gather financial and other data, and reached over 10 million users within 40 days of its September launch. Centre · 1TechCrunch noted that banks and payment firms are still working out how to let customers use AI tools, such as agentic payments, with their accounts.

Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.

Left0 outlets

No left outlet in our sources has covered this story yet.

Centre2 outlets

Framing
Both outlets treat the email as a practical consumer-security warning, TechCrunch with a wry tone and ZDNET as part of a wider bank pushback on AI agents.
Emphasis
Customer liability for shared credentials; risks of leaks and lockouts; other banks' restrictions and agent privacy concerns (ZDNET).
Leaves out or plays down
No Bank of America statement beyond the email; neither explains how the bank would treat disputed agent activity in practice.
Charged language
“privacy nightmare”“kindly asks”“frenzy”
For example
“You can practically sense the frustration in the person sending the email.” — TechCrunch
“AI agents are a privacy nightmare.” — ZDNET

Right0 outlets

No right outlet in our sources has covered this story yet.

Ask about this story

Loading…