Bank of America warns against sharing passwords with AI agents

Bank of America is reminding customers not to hand their banking username and password to anyone else — including, now, an AI assistant. In an email titled “Protecting Your Finances in the AI World,” the bank told customers never to share login credentials with another person or an outside service that offers to act on their behalf, explicitly naming AI-enabled tools and agents as off-limits.

The warning comes as more customers hand their log-ins to personal AI assistants. Doing so risks letting an agent act on an account without the owner’s knowledge, triggering a bank’s fraud lock on suspected unauthorized access, or exposing credentials to hackers if the assistant itself has a security flaw. Banks are reportedly grappling with unauthorized agents accessing customer funds, and — as discussed onstage at TechCrunch Disrupt — payment providers, processors and banks themselves are still working out how to give customers AI-driven access to their accounts, including for agentic payments that let people set agents to buy things automatically at the best price or the right time.

A Bank of America spokesperson confirmed the email, which had circulated on social media, was authentic. Account agreements at most banks place responsibility for any activity on a shared login on the customer. “If you do share your credentials,” the email read, “keep in mind that you’re responsible for activity resulting from that access.”

Why it matters

As AI agents increasingly ask for access to financial accounts, banks are moving to shift liability for any resulting fraud or loss squarely onto customers rather than absorbing it themselves.