Major US banks restrict third-party access in response to account risks from AI agents
JPMorgan, Citi, Bank of America and Morgan Stanley have tightened third-party account access after detecting unusual automation patterns from agentic activity that could bypass some risk controls.
Reporting on October 22 indicates that several major US banks have tightened third-party access to customer accounts, naming JPMorgan, Citi, Bank of America and Morgan Stanley.
The reason relates to agentic activity. Risk systems at these banks detected unusual automation patterns on some accounts that could be used to bypass certain behaviour-based controls. Responses include raising the review threshold for third-party access and restricting permitted operation types.
Such measures directly constrain the use case of individuals letting agents manage their finances. Banks have not published detailed rules nor said whether personal and institutional accounts are treated differently.