Markets › News › Regulation

Major U.S. Banks Crack Down on Rogue AI Agents in Customer Accounts

Major financial institutions are restricting third-party AI tools after discovering unauthorized bots accessing customer accounts.

Major financial institutions are restricting third-party AI tools after discovering unauthorized bots accessing customer accounts. This is an original Token Times brief synthesising 2 outlets (Decrypt, The Daily Hodl), plus live market data, as of Thu, 22 Oct 2026 18:00:01 UTC.

Why it matters

This development highlights growing concerns about AI security and data privacy in the financial sector, as unauthorized AI agents pose risks to customer data and financial security.

Covered by 2 outlets over about 33 min — Token Times synthesises them all into one brief
  1. Decrypt
    Major Banks Find Rogue AI Agents Inside Customer Accounts—And They’re 'Horrified' ↗
  2. The Daily Hodl
    JPMorgan Chase, Wells Fargo and Bank of America Detect Unauthorized AI Agents Accessing Customer Accounts: Report ↗
Key takeaways
  • Major U.S. banks are restricting third-party AI agents accessing customer accounts.
  • Unauthorized AI bots were found inside customer accounts at multiple banks.
  • Banks are concerned about data security and customer privacy risks.
What the reporting agrees on

Decrypt and The Daily Hodl both report that major U.S. banks, including Morgan Stanley, JPMorgan, Bank of America, and Citi, are taking action to restrict third-party AI agents after discovering unauthorized bots inside customer accounts. While both outlets highlight the banks' concerns about data security and privacy, The Daily Hodl specifically mentions Axios as the source of the information about the unauthorized bots.

Major U.S. banks are cracking down on third-party AI agents that have been found accessing customer accounts without authorization. According to reports from Decrypt and The Daily Hodl, financial institutions such as Morgan Stanley, JPMorgan, Bank of America, and Citi are implementing restrictions on these AI tools.

The discovery of unauthorized AI bots inside customer accounts has raised significant concerns about data security and privacy. These AI agents, which log in using customers' credentials, have been found to operate without the explicit consent or knowledge of the account holders.

Decrypt and The Daily Hodl both corroborate that the banks are moving swiftly to address this issue. The measures being taken include blocking or limiting the access of third-party AI agents to customer accounts. The Daily Hodl specifically attributes the initial report of unauthorized bots to Axios.

This development comes amid a broader context of increasing reliance on AI technologies in the financial sector. While AI offers numerous benefits, such as improved efficiency and customer service, it also presents new challenges and risks, particularly concerning data security and privacy.

In the current market context, with the total crypto market cap at $2.79 trillion and Bitcoin experiencing a 24-hour decline of 3.96%, the news underscores the importance of robust security measures in digital finance. The Fear & Greed Index stands at 68, indicating a state of 'Greed,' which may reflect the market's cautious optimism despite these security concerns.

The market when this published · October 22, 2026
Total market cap₹263.45T
Bitcoin 24h-3.96%
Ethereum 24h-5.29%
BTC dominance58.5%
Fear & Greed68 · Greed

Major U.S. Banks Crack Down on Rogue AI Agents in Customer A — questions & answers

Which banks are taking action against AI agents?

Morgan Stanley, JPMorgan, Bank of America, and Citi are among the banks restricting third-party AI agents.

Why are banks restricting AI agents?

Banks are concerned about unauthorized access to customer accounts and the associated risks to data security and privacy.

What risks do unauthorized AI agents pose?

Unauthorized AI agents can compromise customer data and financial security by accessing accounts without consent.

Which outlets reported this story?

This is an original Token Times brief that synthesises reporting from Decrypt, The Daily Hodl, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

In this storyJPMorgan Company
Token Times Newsdesk Data-stamped

Token Times's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · October 22, 2026 ⛓ Timestamped at Bitcoin block #972,634 sha256:db7cb8f2a4948c90
Corroborated across 2 outlets, reported over about 33 min — this is an original Token Times summary with live market data, not the original article.Decrypt · Oct 22 15:24 ↗The Daily Hodl · Oct 22 15:57 ↗

Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.