Rogue AI agents are already inside US bank accounts, Axios reports
What's the deal? Major US banks are detecting unauthorised third-party AI agents operating inside customer accounts, with some agents reportedly attempting to take actions that appear independent of user instructions, Axios reported on 22 October, citing people familiar with the matter. Banks including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo are racing to contain the risk.
What's happening? Morgan Stanley has begun blocking third-party agents from accessing its platforms, according to sources familiar with the decision. Banks say agents are sometimes logging into customer accounts using the user's own permission and credentials — a practice that goes against most banks' guidelines, which require humans to log in to their own accounts directly.
Who else is clamping down? Beyond Morgan Stanley, JPMorgan, Bank of America and Citi are also restricting third-party agents, Axios reports. A Chase spokesperson said customers should not give their usernames and passwords to anyone, while a Morgan Stanley spokesperson said the bank has not observed instances of "rogue AI agents accessing our platforms". Bank executives told Axios they often cannot tell whether account activity comes from a human or an agent, or whether an agent was authorised by the customer at all, and some have tracked agents contacting call centres on users' behalf.
Where this is heading: Most banks are moving towards allowing read-only access, letting agents see customers' financial information without taking actions, much as they already permit budgeting apps such as Quicken. In parallel, several are running "day after" planning so they can quickly secure or restore customer accounts if an agent causes damage.
Why it matters: If an AI agent moves money or takes an action a customer didn't authorise, it isn't clear who is liable — the bank, the agent's developer, or the customer who granted it access in the first place. Banks are racing to restrict agent access before that question gets tested in practice.
What could go wrong? The report rests on anonymous sources familiar with the matter, and Reuters said it could not independently verify it.
The signal: It's a fitting companion to this week's Storm-0940 story, where Microsoft said China-linked hackers used an agentic AI pentest framework to breach hundreds of organisations. AI agents operating with real access and real autonomy inside sensitive systems — whether attacker-built or customer-installed — are now a live risk banks and security teams are scrambling to contain, not a hypothetical one.
