Bank of America Warns Customers Not to Share Banking Credentials With AI Agents

Bank of America has warned customers against sharing their banking usernames and passwords with AI assistants or other outside services, including AI-enabled tools that claim to act on users’ behalf. The warning was delivered in an email to customers titled “Protecting your finances in the AI world,” reflecting growing concern as personal AI assistants become more popular and users increasingly grant them access to sensitive financial systems. The bank emphasized that sharing banking credentials with an AI agent can expose customers to significant risks. An AI assistant could potentially initiate transactions or take other actions without the customer’s knowledge. Banks may also interpret unauthorized access as suspicious activity, leading to account restrictions or lockouts. In more severe cases, a security flaw in the AI tool could cause banking credentials to leak, giving malicious actors a pathway to access accounts and financial information. The warning comes as financial institutions, payment providers and processors continue to explore how AI agents can be integrated into banking and payments. These tools are being considered for functions such as agentic payments, where AI systems autonomously complete purchases at favorable prices or times. However, banks are still working to balance convenience with security, particularly as unauthorized agents attempt to access customer accounts and conduct transactions. Bank of America noted that customers remain responsible for account activity resulting from credentials they share. Under most bank account agreements, users are held liable for actions taken by anyone they provide their login information to, whether that party is another person or an automated service. The email warned that if customers choose to share their credentials, they accept responsibility for any resulting activity. The company did not immediately respond to requests for additional comment.