Bank of America kindly asks that you don’t share your banking password with your AI assistant
Summary
Bank of America emailed customers warning them not to share banking logins with AI assistants or agents, highlighting growing security risks as personal AI agents gain popularity and banks struggle with unauthorized agent access to customer accounts.
View Cached Full Text
Cached at: 10/28/26, 01:21 AM
Similar Articles
US banks detect unauthorized AI agents in customer accounts 👀
Major US banks report discovering unauthorized AI agents operating inside customer accounts, typically using the customer's own login credentials, raising concerns that current password-based authentication cannot distinguish between a user and an authorized or rogue agent. The situation prompts debate over whether agents should use their own scoped credentials rather than sharing customer logins.
My ai assistant almost forwarded my bank statement to a stranger and barely anyone knows this attack exists.
A user describes how a prompt injection attack embedded in an email almost tricked their AI assistant into forwarding bank statements to a stranger, highlighting a real security risk for AI agents with account access.
BMO, CIBC, RBC, TD Bank block personal AI agents, citing safety and security
Canada's major banks — RBC, TD, CIBC, and BMO — announced they will block personal AI agents such as Meta's Muse and OpenAI's ChatGPT from accessing clients' online bank accounts, citing safety and security concerns amid reports of unauthorized third-party AI agent activity in accounts at major U.S. banks.
Banks flag risks as AI goes shopping online
Banks are warning shoppers about the risks of using AI agents for online purchases, including potential fraud, privacy issues, and vulnerabilities in payment methods, especially during India's festive shopping season.
A €0.01 bank transfer could compromise a banking AI agent
Blue41 disclosed an indirect prompt injection vulnerability in Bunq's AI assistant, where a small bank transfer with a malicious transaction description could turn the assistant into a spearphishing vector, highlighting a broader architectural challenge for financial AI agents.