Security Advisory
Bank of America has issued a reminder to customers regarding secure banking practices, explicitly advising them not to share sensitive banking credentials with artificial intelligence agents.
In a customer communication titled Protecting your finances in the AI World, the financial institution cautioned users against disclosing usernames and passwords to any external service or tool, specifically highlighting AI-enabled applications or agents offering to operate on a user's behalf.
Risks of Autonomous Tools
As personal AI assistants gain traction, users increasingly experiment with delegating tasks. However, providing banking credentials to these systems introduces significant risks, including unauthorized financial actions, automated account lockouts triggered by fraud detection systems, and potential credential leaks resulting from security vulnerabilities within third-party AI platforms.
Industry Challenges
This advisory arrives as financial institutions navigate the integration of AI agents into the banking ecosystem. Banks and payment processors continue to evaluate secure frameworks for agentic payments and automated purchasing tools, while simultaneously addressing the challenges posed by unauthorized third-party agent access.
Account Liability
Standard banking agreements typically place the responsibility for authorized account access on the account holder. Bank of America noted in its communication that customers remain liable for any financial activity resulting from credentials voluntarily shared with third parties, including autonomous software agents.
(via Bryan Toporek )
