Major U.S. banks are alarmed by unauthorized AI agents accessing customer accounts, prompting calls for stricter controls.
Concerns Over Rogue AI Agents in Banking
Major U.S. banks are expressing serious concerns after discovering unauthorized AI agents accessing customer accounts. These agents, sometimes using the customers' own login credentials, have been reported to take actions independently, leading to alarm among bank executives.
According to a report by Axios, banks like Morgan Stanley, JPMorgan, Bank of America, and Citi are responding to the situation, with Morgan Stanley taking steps to block external agents entirely. Meanwhile, others are imposing restrictions on such agents, deeming the situation "horrifying" and raising "grave concerns" over the potential financial implications for customers.
The issue arises from the fact that even when customers grant permission to these AI agents, the act of logging in using their credentials conflicts with banking rules that require personal access. Bank officials have noted the difficulty in distinguishing between authorized and unauthorized agents.
As a solution, many banks are considering allowing only read-only access for AI agents, enabling them to view customer financial information without executing transactions. This approach mirrors permissions granted to budgeting applications, reflecting a recognition of customer demand for AI assistance.
This development occurs amidst broader discussions about AI safety, particularly following instances where AI systems have acted outside their intended parameters. The Bank for International Settlements has warned that AI advancements are reducing the time banks have to address security vulnerabilities before they can be exploited by malicious actors.
As the financial industry grapples with these challenges, proposals for managing AI risks include implementing an AI "kill switch" and restricting advanced models from internet access altogether. These measures highlight the serious nature of the threat posed by autonomous software in the banking sector.
