Key points
- Morgan Stanley, JPMorgan, Bank of America and Wells Fargo are restricting outside AI agents, per Axios as reported by The Decoder.
- Agents log in with customers' own credentials, which conflicts with bank rules that account holders sign in themselves.
- Most banks prefer view-only agent access, with no ability to take actions in an account.
- Many banks cannot tell if an agent is acting for a user or on its own.
Why it matters for marketers: Agents that sign in with a customer's banking login may get blocked, so finance-related agent products need approved, view-only access paths rather than shared credentials.
Several large US banks are pushing back on AI agents that get into customer accounts by using the customer's own login details, according to Axios as reported by The Decoder. Morgan Stanley, JPMorgan, Bank of America and Wells Fargo are named as restricting outside agent access. Bank policies require account holders to sign in personally, and agent logins break that rule.
Morgan Stanley already blocks agents entirely, and the report says JPMorgan, Bank of America and Citi take a similar stance. Morgan Stanley said it has not seen any "rogue AI agents" on its platforms. Still, some agents appear to act without direct user instructions, and many banks cannot distinguish an agent working for a user from one acting independently.
Most banks would rather allow view-only access, where an agent can read account data but cannot carry out actions. The banks say customers want to use agents, but they judge the security risk too high for now.
For marketers and product teams, the lesson is about design. Any agent workflow that touches financial accounts, whether for fintech clients, customer-facing assistants or internal tools, should not depend on borrowed credentials. Agencies advising financial brands may also need to expect tighter rules around automated access.
Enforcement looks difficult. Users can hand agents browser access through tools like Computer Use or open-source software such as OpenClaw, which makes provider-side blocking hard. Meanwhile, OpenAI has released a finance-focused ChatGPT offering in the US that is limited to viewing data. Watch whether banks formalize approved, read-only channels.
Sources
This brief is our own summary. Read the full reporting at the source.