As artificial intelligence moves from advisor to actor, the institutions entrusted with humanity's savings are drawing a firm line. Major American banks, led by JPMorgan Chase and Citibank, have blocked third-party AI agents like Meta's Muse from directly accessing customer accounts, citing the danger of autonomous systems executing financial transactions without human oversight. The decision reflects a recurring tension in technological progress: the pace of capability routinely outstrips the wisdom needed to govern it. For now, the financial system has chosen caution over convenience, and th
Major U.S. Banks Block Outside AI Agents From Accessing Customer Accounts
You don't want rogue agents moving your money
Mark
So banks are just saying no to AI agents touching accounts. Is this a permanent ban, or are they waiting for something to change?
Mimi
It's a structural block right now, not a temporary pause. JPMorgan and Citi have implemented policies that prevent third-party AI agents from direct access. But the language suggests this could evolve—they're not saying never, they're saying not yet.
Luke
The question is whether they're blocking the technology or blocking the risk. Those are different things. If Meta's Muse or another system could prove it's secure, would banks lift the restrictions?
Mimi
That's the real tension. Banks say they want innovation, but they also can't afford a failure. One compromised AI agent executing fraudulent transactions across millions of accounts could be catastrophic.
Mark
What's the actual threat here? Is it that the AI agent itself is malicious, or that it could be hacked?
Luke
Both, technically. But also: what if the AI just makes a mistake? What if it misunderstands an instruction and sends money to the wrong place? Who's liable?
Mimi
That's the gap nobody has solved yet. The banks aren't willing to take on that liability, and they're not sure the AI companies are either.
Mark
So this is really about liability and regulatory uncertainty, not just security?
Mimi
Security is the stated reason, but yes—liability and regulatory uncertainty are underneath it. Banks operate in a heavily regulated space. They can't move fast and break things.
Luke
And to be fair, the banks have a point. We don't have standards yet for how to authenticate an AI agent, how to verify its transactions, or how to hold it accountable if something goes wrong.
Mark
Does this slow down AI development in finance, or does it just redirect it?
Mimi
It redirects it. Developers will build agents that advise and prepare transactions, but leave the execution to humans. That's less frictionless, but it's what the market will accept right now.
Le Pouls
- Meta's Muse arrived promising to move money and manage accounts by voice or text — and banks responded by locking the door before it could step inside.
- JPMorgan CEO Jamie Dimon named the fear plainly: a rogue AI agent, whether hacked, malfunctioning, or simply wrong, could drain accounts and trigger cascading fraud across millions of customers.
- The threat isn't hypothetical — prompt injection attacks and autonomous decision errors represent real operational hazards that regulators and executives have spent decades learning to contain.
- Citibank formalized its own restrictions, making clear this is not a temporary pause but a structural barrier: AI agents may advise, but humans must still pull the trigger on transactions.
- The banking industry is not opposed to innovation — it is opposed to risk it cannot audit, monitor, or control, and third-party AI agents currently sit entirely outside that oversight.
- The standoff will not hold forever, but the message it sends is durable: the financial system will set the terms of AI's entry, not the other way around.
As artificial intelligence moves from advisor to actor, the institutions entrusted with humanity's savings are drawing a firm line. Major American banks, led by JPMorgan Chase and Citibank, have blocked third-party AI agents like Meta's Muse from directly accessing customer accounts, citing the danger of autonomous systems executing financial transactions without human oversight. The decision reflects a recurring tension in technological progress: the pace of capability routinely outstrips the wisdom needed to govern it. For now, the financial system has chosen caution over convenience, and that choice will shape the terms on which AI enters our economic lives.
The promise of AI agents managing your finances with a simple command has met a swift and structural refusal from the institutions that hold your money. After Meta launched Muse — an AI system capable of moving funds and managing accounts autonomously — JPMorgan Chase, Citibank, and other major American banks moved quickly to block third-party AI agents from direct account access. The response was not a pilot limitation or a temporary pause. It was a wall.
JPMorgan CEO Jamie Dimon framed the concern without ambiguity: rogue agents are the risk. An AI system that malfunctions, gets manipulated through a prompt injection attack, or simply acts on a flawed instruction could drain an account or misdirect funds at scale. A single widespread failure would mean millions of affected customers, a flood of fraud claims, and regulatory consequences the industry has spent decades learning to dread.
What separates this moment from earlier fintech disruptions is the nature of the capability itself. AI agents like Muse and Instinct don't just surface information — they take autonomous action. Banks have long built APIs to welcome third-party financial tools, but those frameworks assumed a human being would review and approve each consequential step. An agent that skips that checkpoint is a fundamentally different proposition.
The restrictions now in place mean that even if you want an AI agent to manage your money, it cannot log in and act on its own. It can prepare, suggest, and advise — but execution remains yours. Banks cannot audit a third party's training data, monitor its reasoning in real time, or guarantee its behavior under every condition. That uncertainty, for institutions built on the management of risk, is disqualifying.
This is not a permanent settlement. Standards for AI agent authentication, liability, and transaction verification will eventually emerge. But the financial establishment has delivered a clear opening position: the convenience of autonomous AI does not yet outweigh the danger of unauthorized access to depositor funds. The technology may be ready. The system that holds the money is not.
The vision of AI agents handling your finances with a simple voice command or text prompt has collided with the reality of banking security. After Meta launched Muse, an AI agent designed to move money and manage accounts on behalf of users, major American banks began slamming the door shut. JPMorgan Chase, Citibank, and others have now implemented restrictions that prevent outside AI systems from directly accessing customer accounts—a move that signals how quickly the financial industry is willing to reject new technology when the stakes involve depositor funds.
The concern is straightforward, if unsettling. Jamie Dimon, JPMorgan's chief executive, framed it plainly: you don't want rogue agents. An AI system operating without proper guardrails, or one that malfunctions, or one that falls victim to a prompt injection attack, could theoretically drain an account or move money to the wrong recipient. The risk isn't theoretical—it's the kind of operational hazard that regulators and bank executives have spent decades learning to fear. A single widespread failure could affect millions of customers and trigger a cascade of fraud claims, regulatory investigations, and reputational damage.
What makes this moment significant is the speed of the response. Muse and similar systems like Instinct represent a new class of AI capability: agents that don't just provide information or recommendations, but take autonomous action in the real world. They can execute transactions, modify settings, and move money. Banks have spent years building APIs and open banking frameworks to allow third-party developers to build financial tools. But those frameworks assumed human oversight at the critical moment—a person reviewing and approving a transaction before it executes. An AI agent that acts without that human checkpoint is a different animal entirely.
Citibank became the latest major institution to formalize these restrictions, joining JPMorgan in explicitly blocking third-party AI agents from direct account access. The policy is not a temporary pause or a pilot program limitation. It's a structural barrier. If you want to use an AI agent to manage your money at these banks, the agent will not be able to log in and execute transactions on its own. It can advise, suggest, and prepare—but the final action remains yours.
The banking industry's move reflects a broader tension in AI development. The technology is advancing faster than the regulatory and security frameworks that govern financial services. Banks are not opposed to innovation, but they are opposed to risk they cannot quantify or control. An AI agent from a third party—whether built by Meta, a startup, or anyone else—represents a variable that sits outside the bank's direct oversight. The bank cannot audit its training data, cannot monitor its decision-making in real time, and cannot guarantee it will behave as intended under all circumstances.
This is not a permanent settlement. The restrictions will likely evolve as the industry develops standards for AI agent authentication, transaction verification, and liability. But for now, the message from the banking establishment is clear: the convenience of an autonomous AI agent does not outweigh the risk of unauthorized access to customer money. The technology may be ready. The financial system is not.
Citations marquantes
You don't want rogue agents moving your money— Jamie Dimon, JPMorgan Chase CEO
Envie de l'histoire complète ?
Lire l'original sur Google News ↗