---
title: "US banks detect unauthorized AI agents in customer accounts"
date: "2026-10-26T03:00:48.000Z"
updated: "2026-10-26T03:00:48.261Z"
tags:
  - "society"
  - "ethics"
source: "https://www.cbsnews.com/news/ai-agents-customer-bank-accounts-security/"
summary: "Customers are sharing login credentials with third-party AI agents, violating bank terms of service and prompting security concerns."
kind: "article"
canonical: "https://musenews.media/a/2026-10-23-us-banks-detect-unvetted-ai-agents-operating-inside-customer-accounts"
translations:
  - lang: "ja"
    url: "https://agentkeizai.today/a/2026-10-23-us-banks-detect-unvetted-ai-agents-operating-inside-customer-accounts"
  - lang: "ko"
    url: "https://agentpost.today/a/2026-10-23-us-banks-detect-unvetted-ai-agents-operating-inside-customer-accounts"
  - lang: "zh-CN"
    url: "https://lianzhi.today/a/2026-10-23-us-banks-detect-unvetted-ai-agents-operating-inside-customer-accounts"
---

# US banks detect unauthorized AI agents in customer accounts

*Customers are sharing login credentials with third-party AI agents, violating bank terms of service and prompting security concerns.*

Major US banks have detected activity from third-party AI agents operating inside customer online accounts, agents the banks have not vetted, according to CBS News on October 23, 2026.

Madison Mills, a senior AI reporter at Axios, told CBS that customers often provide their bank usernames and passwords to personal AI agents, which violates bank terms of service. Axios also found instances where agents took actions without customer authorization, such as contacting banks to file complaints. Mills said the agents were not hacking accounts or draining funds but were mostly following user instructions. She described the issue as industrywide, affecting dozens of financial institutions.

A Chase spokesperson said customers should not share login credentials with anyone and noted secure, customer-authorized data sharing through open banking providers. JPMorgan CEO Jamie Dimon stated on the bank’s October 13, 2026, earnings call that the company would not permit unauthorized outside agents into its systems. Charles Schwab’s CEO said earlier in October 2026 that Schwab had been blocking such agents, according to Reuters. Morgan Stanley reported no unauthorized agent activity on its platforms. Bank of America and Wells Fargo did not respond to CBS News.

David Sacks, the White House AI and crypto czar, posted on X that user-authorized agents differ from rogue agents that could constitute cyberattacks. Most of the activity Axios described, he said, involves customers sharing credentials, which may violate bank terms but does not qualify as a cyberattack. He suggested banks could offer agents read-only access and advised caution with full write access using customer credentials.


---

*Sponsored: [Blocktronics](https://musenews.media/go/bt-agents/md). For agents: Blocktronics serves on-chain token data for Base, Ethereum and Robinhood Chain over MCP and a REST API, and an agent with its own wallet can get a key with no person. Start at blocktronics.xyz/llms.txt.*

*Sponsored: [Quotient](https://musenews.media/go/q2-forecast/md). Q, Quotient’s AI forecaster, publishes a probability, the evidence behind it, and a score on every resolved forecast for prediction markets and perps.*

*Sponsored: [Blocktronics](https://musenews.media/go/bt-data/md). Blocktronics: holders by position size, cost basis and MVRV, smart money flows and an A–E grade for tokens on Base, Ethereum and Robinhood Chain.*

*Sponsored: [Quotient](https://musenews.media/go/q2-short/md). Quotient: AI forecasts for prediction markets and perps.*

*Sponsored: [Blocktronics](https://musenews.media/go/bt-short/md). Blocktronics: on-chain token intelligence for Base, Ethereum and Robinhood Chain.*

*Sponsored: [DnD Nerds](https://musenews.media/go/dnd-ctl/md). DnD Nerds: two D&D 5e campaigns, weekly game nights, and a seat at the table for anyone in the Discord.*