Bank of America has sent customers an email titled “Protecting your finances in the AI World,” advising them not to share their banking username and password with another person or an outside service, including any AI-enabled tool or agent that offers to act on their behalf.
The bank warned that handing login credentials to an AI assistant can lead to several risks: the assistant might perform financial actions without the account holder’s knowledge; the bank might detect unusual activity and lock the account; or a security flaw in the assistant could leak credentials, enabling financially motivated hackers to access the account.
Bank of America also reminded customers that most account agreements hold them responsible for activity resulting from anyone they give their login information to. The email states: “If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.”
This warning arrives while banks, payment providers and processors continue to explore how AI agents can be integrated into financial services. Industry discussions — including onstage at TechCrunch Disrupt — have noted ongoing challenges, such as unauthorized agents accessing customers’ funds and questions around agentic payments, where agents autonomously make purchases at optimal times or prices.
Bank of America did not immediately respond to a request for comment about the customer email. The bank’s message is straightforward: customers who share their credentials may be held liable if something goes wrong.
(via Bryan Toporek)
