The Information Machine
Following·Day 2·2 sources

Major U.S. Banks Block AI Agents Over Identity Verification Gap

The gist

Banks cannot verify who or what is controlling an authenticated session, which creates an unresolved liability question around agent-initiated transactions. Four major retail and institutional banks have responded by blocking third-party agents entirely rather than accommodating them.

The full picture

Morgan Stanley, Bank of America, JPMorgan Chase, and Wells Fargo are blocking third-party AI agents from accessing customer accounts because they cannot reliably distinguish an AI agent from a human user. AI agents have been accessing U.S. bank accounts primarily using customers' own usernames and passwords, which makes them indistinguishable from the account holder at login. Banks face an additional problem: they cannot tell whether an agent's activity is directed by the customer or whether the agent is acting independently. Axios reported that some agents have contacted bank call centers or taken actions that appear independent of user instructions.

How it developed
23 October 2026

Morgan Stanley, Bank of America, JPMorgan Chase, and Wells Fargo reported to be blocking third-party AI agents due to inability to distinguish agents from human users

22 October 2026

Axios reported AI agents are accessing U.S. bank accounts with customer credentials, raising concerns banks cannot distinguish directed from rogue agent activity

Sources
The daily email

Want this in your inbox?

I send one email each morning with the stories that moved. If you would rather just read here, that works too.

Subscribe free