Bank of America kindly asks that you don’t share your banking password with your AI assistant

TechCrunch AI News

Summary

Bank of America emailed customers warning them not to share banking logins with AI assistants or agents, highlighting growing security risks as personal AI agents gain popularity and banks struggle with unauthorized agent access to customer accounts.

The banking giant reminds customers that "you're responsible for activity" resulting from your AI agents' access.
Original Article
View Cached Full Text

Cached at: 10/28/26, 01:21 AM

# Bank of America kindly asks that you don't share your banking password with your AI assistant | TechCrunch Source: [https://techcrunch.com/2026/10/27/bank-of-america-kindly-asks-that-you-dont-share-your-banking-password-with-your-ai-assistant/](https://techcrunch.com/2026/10/27/bank-of-america-kindly-asks-that-you-dont-share-your-banking-password-with-your-ai-assistant/) 2:44 PM PDT · October 27, 2026 Financial giant Bank of America is reminding customers to bank safely by kindly*not*sharing your banking credentials with your AI agent\. In an email blast to customers titled “Protecting your finances in the Al World,” Bank of America urged customers to never share their username and password with another person or an outside service, “including an Al\-enabled tool or agent that offers to act on your behalf\.” You can practically*sense*the frustration in the person sending the email\. Still, customers are increasingly handing over their log\-ins as personal AI assistants[grow more popular](https://techcrunch.com/2026/09/08/meta-debuts-its-muse-ai-agent-will-consumers-trust-it/)\. Sharing your banking username and password with an AI assistant runs the risk that it could do something with your finances without your knowledge, or that your bank thinks someone’s raiding your account and locks you out of it\. Worse, a security flaw in the AI assistant could result in it leaking your banking credentials elsewhere, giving financially motivated hackers a way into your bank account\. This latest warning comes as banks are still exploring how AI agents fit into the financial world but are reportedly grappling with[unauthorized agents accessing their customers’ money](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access)\. As we[discussed onstage](https://youtu.be/mZ83pmjVcec?si=QS6NhKiATDR4rujx&t=825)at[TechCrunch Disrupt](https://techcrunch.com/events/techcrunch-disrupt/), banks, payment providers, and processors are still trying to figure out how to allow customers access to their bank accounts using AI tools, such as for agentic payments, which allow people to set agents to autonomously buy things at the best price or the right time\. A spokesperson for Bank of America confirmed the authenticity of the bank’s email that was[posted to social media](https://bsky.app/profile/btoporek.bsky.social/post/3myuzetgir2u6)\. But heed the bank’s warning, for if things go wrong, it’s on you\. Account agreements at most banks hold[customers responsible](https://www.usbank.com/caas/digital-services-agreement.html?invoca_hold=true)for anyone they give their log\-in to\. “If you do share your credentials,” its email reads, “keep in mind that you’re responsible for activity resulting from that access\.” *\(via*[*Bryan Toporek*](https://bsky.app/profile/btoporek.bsky.social/post/3myuzetgir2u6)*\)* *When you purchase through links in our articles,[we may earn a small commission](https://techcrunch.com/techcrunch-affiliate-monetization-standards/)\. This doesn’t affect our editorial independence\.* Zack Whittaker is the security editor at TechCrunch\. He also authors the weekly cybersecurity newsletter,[this week in security](https://this.weekinsecurity.com/)\. He can be reached via encrypted message at zackwhittaker\.1337 on Signal\. You can also contact him by email, or to verify outreach, at[\[email protected\]](https://techcrunch.com/cdn-cgi/l/email-protection#42382321296c352a2b363623292730023627212a2130372c212a6c212d2f)\. [View Bio](https://techcrunch.com/author/zack-whittaker/) ## Most Popular

Similar Articles

US banks detect unauthorized AI agents in customer accounts 👀

Reddit r/AI_Agents

Major US banks report discovering unauthorized AI agents operating inside customer accounts, typically using the customer's own login credentials, raising concerns that current password-based authentication cannot distinguish between a user and an authorized or rogue agent. The situation prompts debate over whether agents should use their own scoped credentials rather than sharing customer logins.

BMO, CIBC, RBC, TD Bank block personal AI agents, citing safety and security

Reddit r/singularity

Canada's major banks — RBC, TD, CIBC, and BMO — announced they will block personal AI agents such as Meta's Muse and OpenAI's ChatGPT from accessing clients' online bank accounts, citing safety and security concerns amid reports of unauthorized third-party AI agent activity in accounts at major U.S. banks.

Banks flag risks as AI goes shopping online

Reddit r/artificial

Banks are warning shoppers about the risks of using AI agents for online purchases, including potential fraud, privacy issues, and vulnerabilities in payment methods, especially during India's festive shopping season.

A €0.01 bank transfer could compromise a banking AI agent

Hacker News Top

Blue41 disclosed an indirect prompt injection vulnerability in Bunq's AI assistant, where a small bank transfer with a malicious transaction description could turn the assistant into a spearphishing vector, highlighting a broader architectural challenge for financial AI agents.