2:44 PM PDT · October 27, 2026
Financial elephantine Bank of America is reminding customers to slope safely by kindly not sharing your banking credentials with your AI agent.
In an email blast to customers titled “Protecting your finances successful the Al World,” Bank of America urged customers to ne'er stock their username and password with different idiosyncratic oregon an extracurricular service, “including an Al-enabled instrumentality oregon cause that offers to enactment connected your behalf.”
You tin practically sense the vexation successful the idiosyncratic sending the email. Still, customers are progressively handing implicit their log-ins arsenic idiosyncratic AI assistants grow much popular. Sharing your banking username and password with an AI adjunct runs the hazard that it could bash thing with your finances without your knowledge, oregon that your slope thinks someone’s raiding your relationship and locks you retired of it. Worse, a information flaw successful the AI adjunct could effect successful it leaking your banking credentials elsewhere, giving financially motivated hackers a mode into your slope account.
This latest informing comes arsenic banks are inactive exploring however AI agents acceptable into the fiscal satellite but are reportedly grappling with unauthorized agents accessing their customers’ money. As we discussed onstage astatine TechCrunch Disrupt, banks, outgo providers, and processors are inactive trying to fig retired however to let customers entree to their slope accounts utilizing AI tools, specified arsenic for agentic payments, which let radical to acceptable agents to autonomously bargain things astatine the champion terms oregon the close time.
A spokesperson for Bank of America confirmed the authenticity of the bank’s email that was posted to societal media. But heed the bank’s warning, for if things spell wrong, it’s connected you. Account agreements astatine astir banks clasp customers responsible for anyone they springiness their log-in to. “If you bash stock your credentials,” its email reads, “keep successful caput that you’re liable for enactment resulting from that access.”
(via Bryan Toporek)
When you acquisition done links successful our articles, we whitethorn gain a tiny commission. This doesn’t impact our editorial independence.
Zack Whittaker is the information exertion astatine TechCrunch. He besides authors the play cybersecurity newsletter, this week successful security.
He tin beryllium reached via encrypted connection astatine zackwhittaker.1337 connected Signal. You tin besides interaction him by email, oregon to verify outreach, astatine [email protected].














English (US) ·