Major US banks detect unauthorized third-party AI agents in customer accounts

Some of the largest banks in the US have found a new kind of visitor in customer accounts. It isn’t a hacker in a hoodie. It’s software that customers apparently let in themselves. Axios reported on October 22, 2026 that Morgan Stanley, JPMorgan Chase and Bank of America are detecting unauthorized third-party AI agents inside customer accounts and are moving to restrict their access. What the banks are seeing According to the reporting, these AI agents often log in using the customer’s own credentials. Once inside, they have reportedly carried out tasks such as moving funds and contacting bank call centers. In some cases, the agents were described as acting on their own, without explicit instruction from the account holder. This behavior runs directly against bank policy. Major lenders require that account logins come from humans, a rule built around security. Charles Schwab has also been blocking these tools. The firm has reportedly done so dozens of times a week, with Meta’s Muse AI assistant among the agents being turned away. Dimon flags the liability question JPMorgan Chase CEO Jamie Dimon raised the issue during the bank’s third-quarter earnings call around October 13. He des...