AI MarketingVideo Blog5 min read

Banks Are Blocking AI Agents at the Door

November 2, 2026By Sandbox Media

Reuters reports that major U.S. banks are blocking third-party AI agents from operating inside customer accounts and making transactions. JPMorgan, Schwab, Bank of America, PNC and Citi have each said where they draw the line.

If you run a business, the question that lands on your desk is simpler: what do you do when an AI tool asks for your bank login? Don't hand it over. Ask whether it can connect read-only.

Key takeaways

Reuters (October 22, 2026) reports that major U.S. banks are blocking third-party AI agents from operating in customer accounts.
JPMorgan's Jamie Dimon said, "We're not going to allow just any outside agent to come in inside the company." Schwab's Rick Wurster said, "We are blocking unauthorized agents who try to log in on behalf of clients. It is not a safe way for our clients to access Schwab, and we are blocking it to protect clients and our firm."
Bank of America's Brian Moynihan told CNBC a human should approve money leaving an account, according to FStech. PNC's Bill Demchak said no bank will let people transact inside accounts without a human in the loop, according to Banking Dive.
Citi says it does not allow third-party AI agents or assistants to log into a customer's account, though certain open-banking providers can still offer limited, read-only access (FStech).
The Axios report that some agents acted beyond user instructions relied on unnamed sources and is unconfirmed. Per Reuters, a person familiar said Morgan Stanley has not seen unauthorized or rogue agents.

Which banks are blocking AI agents?

Reuters reports that major U.S. banks are blocking third-party AI agents. On the record: JPMorgan (Jamie Dimon), Charles Schwab (Rick Wurster), Bank of America (Brian Moynihan), PNC (Bill Demchak) and Citi.

Bank	What the sources report
JPMorgan	Dimon: "We're not going to allow just any outside agent to come in inside the company."
Charles Schwab	Wurster: "We are blocking unauthorized agents who try to log in on behalf of clients. It is not a safe way for our clients to access Schwab, and we are blocking it to protect clients and our firm."
Bank of America	Moynihan told CNBC a human should approve money leaving an account (via FStech).
PNC	Demchak: no bank will let people transact inside accounts without a human in the loop (Banking Dive).
Citi	Does not allow third-party AI agents or assistants to log into a customer's account; limited read-only access via certain open-banking providers (FStech).

Is looking at an account treated differently from moving money?

Yes. Here's where the banks draw it: Moynihan said a human should approve money leaving an account, and Demchak said no bank will let people transact inside accounts without a human in the loop. FStech reports Citi says customers can still authorize limited, read-only access through certain open-banking providers.

That's what the banks said. Here's Sandeep's take: you've lived the small version of this. A new hire asks for the company card login. You wouldn't give them yours. You'd give them their own card, with a limit. Same instinct, bigger stakes.

What should a business do if an AI tool asks for a bank login?

Sandeep's advice: don't type it in. Ask whether the tool can connect read-only, and keep money movement in a person's hands.

If your team is already trying AI tools, write down which ones can touch which accounts. Start with our post on Does Your Company Have an AI Policy?

What's still unconfirmed: the Axios report that some agents acted beyond what users told them rests on unnamed sources. Treat it as a claim, not a finding.

Sources: Reuters, "US banks are blocking third-party AI agents access to customer accounts, sources say" (Oct 22, 2026); FStech; Banking Dive; InvestmentNews; The Logic (on RBC and Meta's Muse).

Frequently asked questions

Is this confirmed? The on-record statements are. The Axios report that some agents acted beyond user instructions relied on unnamed sources and is unconfirmed; per Reuters, a person familiar said Morgan Stanley has not seen rogue agents.

Can an AI tool still get read-only access to my accounts? Citi says customers can give limited, read-only access through certain open-banking providers (FStech).

What should I do if an AI tool asks for my bank login? Don't type it in. Ask whether it can connect read-only, and keep money movement in a person's hands.