Bank of America kindly asks that you don’t share your banking password with your AI assistant

Bank of America has emailed customers warning them not to share online-banking usernames or passwords with AI-enabled tools or agents that offer to act on their behalf. The message, titled “Protecting your finances in the AI World,” says customers should never provide credentials to another person or outside service. A Bank of America spokesperson confirmed that an email posted on social media was authentic. Providing bank credentials to an AI assistant could allow the tool to act on an account without the customer’s knowledge, trigger bank fraud controls that lock the customer out, or expose credentials if the assistant has a security flaw. Banks, payment providers, and processors are still determining how AI agents could access accounts for uses such as agentic payments, in which an agent autonomously purchases goods at a selected price or time. Financial institutions are also reportedly dealing with unauthorized agents accessing customer funds. Bank of America’s email says customers remain responsible for activity resulting from access when they share their credentials, reflecting account agreements at most banks that hold customers liable for anyone given their login information.