🔍 Read the full analysis: AI Money Safety Starts With Keeping Your Password Private on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Bank of America has warned customers not to give banking usernames or passwords to AI assistants, saying customers are responsible for activity resulting from shared access. The warning comes as banks confront third-party agents accessing accounts and financial firms explore agent-led payments and trading. The legal responsibility for losses involving AI agents has not been settled.
Bank of America warned customers this week not to share their usernames or passwords with AI assistants, saying customers who provide credentials are responsible for activity resulting from that access. The warning comes as financial firms face growing use of AI agents to access accounts, make payments and trade, while the rules for losses caused by those agents remain uncertain.
The email, titled “Protecting your finances in the AI World,” says banking credentials should never be shared with another person or given to an outside service, including an AI-enabled tool or agent acting on a customer’s behalf. Bank of America also said it is “excited about what AI used responsibly can deliver.” A customer posted the email on Bluesky; TechCrunch reported it on October 27, and a bank spokesperson confirmed its authenticity to the outlet.
The warning addresses a basic security problem: an AI agent using a customer’s password may appear to the bank as the customer. That can make it difficult to distinguish an action the customer approved from activity by an agent, or from access by someone who stole the credentials. The source article says an Axios report on October 22, citing unnamed sources, described major U.S. banks finding third-party AI agents in customer accounts, often logged in with the customer’s password. Banks were reportedly blocking some access and revising terms, but those details have not been independently established here.
Financial companies are also pursuing agent-driven services. At a Tuesday investor discussion, Visa said trust is the biggest barrier to AI agents that make purchases, according to the source material. Robinhood said customers had put more than $250 million into accounts that AI agents trade. The source does not specify the period covered by that figure or provide a comparison baseline. Robinhood’s separate accounts and spending limits do not remove all risk: the company says customers “assume all risk” for trades made by AI agents.
Before your agent touches money
Give it a valet key, not the master key
Logging in with your password makes the agent you. A credential made for the agent can do only the job you gave it, and you can take it back.
- What it opensEverything you can do: transfers, payees, settings, statements
- LimitsNone that the agent cannot get around by logging in as you
- What the bank seesYou, or a thief. It cannot tell which
- If a web page tricks itThe trick reaches your whole account
- To take it backChange your password everywhere it was used
- If money goes missingUS rules can exclude transfers by someone you gave access to; Bank of America: “you’re responsible”
- What it opensOnly what you allowed: read-only, one card, one pot of money
- LimitsBuilt in: amount, merchant, time window, approval on your phone
- What the bank seesAn identified agent acting for an identified person
- If a web page tricks itThe damage stops at the limit
- To take it backDisconnect the agent or delete its card. Your password never moved
- If money goes missingDepends on the terms. Read them first: some still put all risk on you
A comparison of two set-ups, not a measurement. Which limits exist depends on your bank, card and app.
Sources: Bank of America customer email, confirmed to TechCrunch (27 Oct 2026); 12 CFR 1005.2(m); OWASP LLM01. Comparison: Thorsten Meyer.
Powered by Thorsten Meyer AI
Why Banking Passwords Carry Wider Risk
A password is not a narrow permission to complete one task. It can give an agent access to the same account functions available to the customer, while leaving the bank with limited ways to identify who initiated a transaction. That creates risks beyond an unwanted purchase: a bank may treat unusual activity as suspicious and restrict the customer’s access, while a customer may dispute an action the agent made using their credentials.
It is also not settled who pays if an agent causes a loss. In the United States, Regulation E excludes from its definition of an unauthorized transfer one initiated by a person given access by the consumer, subject to conditions. Whether that provision applies to an AI agent or the company operating it has not been decided by a regulator or court, according to the source article. In the European Union, payment rules require customers to take reasonable steps to protect personalised security credentials; whether sharing a password with an AI agent amounts to gross negligence has not been tested in court, the article says. These are legal questions, not a confirmed ruling that customers always bear the loss.
For readers, the practical issue is the size of the permission being granted. Account safeguards and liability are different things: a spending cap may limit possible damage, but it does not by itself determine who is legally responsible. Customers should check the service’s terms and their bank’s rules before linking an account or enabling automatic actions.
Products Worth Considering
Jackery HomePower 3000 Portable Power Station with Two 200W Solar Panels
EcoFlow Smart Home Panel 2 Whole-Home Backup System Hub
Logitech MX Brio Ultra HD 4K Webcam, Graphite
As an affiliate, we earn on qualifying purchases.
From Account Access to Agent Payments
The warning arrives as AI products shift from answering questions to taking actions on a user’s behalf. An agent may read messages, invoices or shopping pages and then attempt to complete a task. If it signs in with the customer’s ordinary banking credentials, it receives broad access rather than permission limited to one payment or purpose.
That creates another concern: information the agent reads may try to influence its behavior. Security researchers call this prompt injection—instructions hidden in or supplied through content an AI system processes. The source article describes it as a leading risk on the OWASP list for AI applications. It does not establish that prompt injection caused any of the reported banking activity, but it illustrates why an agent’s access should be restricted even when the user initiated the connection.
The source recommends narrower alternatives where available: read-only access, requiring approval for each payment, a virtual card with a spending limit, or a token restricted to a particular merchant, amount and time window. Another option is a separate account containing only funds the user is prepared to expose. These controls reduce an agent’s reach; they do not guarantee that an action will be correct or settle who bears a loss.
““If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.””
— Bank of America, in an email to customers reported by TechCrunch
Who Pays for an Agent’s Mistake
No court or regulator ruling is cited that decides whether a customer who shares a password with an AI agent has authorized its transactions under U.S. electronic-transfer rules. The source article’s discussion of Regulation E is the author’s interpretation, not legal advice or an established legal outcome. The application of EU credential-protection rules to AI agents is also unresolved in the account provided.
The scope and frequency of banks’ reported encounters with AI agents remain unclear. The October 22 Axios account cited unnamed sources, and the material does not name the banks, provide counts of affected accounts or describe specific customer losses. The source also does not include the full Visa investor remarks or details about the time period behind Robinhood’s reported $250 million figure. Bank of America’s email confirms its advice, but does not by itself establish that every bank applies the same policy or that every AI connection is prohibited.
Check Permissions Before Connecting
Customers considering an AI financial tool should review what access it requests, whether it can initiate transfers or trades, and what its terms say about responsibility for mistakes. Where offered, use limited permissions, transaction approvals, capped virtual cards or a separate account rather than sharing a primary banking password. Customers should also confirm directly with their bank how it treats third-party access.
Further clarity will depend on banks’ policies, the design of agent-payment systems and legal decisions about authorization and liability. The source material does not identify a scheduled regulatory ruling or company announcement. Until those questions are resolved, Bank of America’s warning is the confirmed practical message: keep banking credentials private and do not assume that an AI tool’s safeguards determine who pays if something goes wrong.
Key Questions
What did Bank of America tell customers?
It warned customers not to share banking usernames or passwords with another person or an outside service, including an AI-enabled tool or agent. The email said customers who share credentials are responsible for activity resulting from that access.Does sharing a password automatically make customers liable for an AI agent’s transactions?
That has not been established. The source article discusses U.S. and EU payment rules but says their application to AI agents has not been resolved by a court or regulator. The legal outcome may depend on the circumstances and applicable rules.What can customers use instead of giving an agent a banking password?
Where available, narrower options include read-only access, approval for each payment, a capped virtual card, a token limited by merchant, amount and time, or a separate account with limited funds. These controls reduce access but do not guarantee against errors or determine liability.Why can an AI agent create a security concern even if the customer connects it?
An agent using the customer’s credentials may look like the customer to a bank. It may also process emails, webpages or files that could contain instructions intended to influence its actions, a risk known as prompt injection.Source: ThorstenMeyerAI.com
