Axios, banks find unauthorized AI agents in customer accounts
Some agents are attempting actions that appear independent of user instructions, bank sources told Axios.
Major US banks are detecting unauthorized third-party AI agents inside customer accounts, Madison Mills reports for Axios. Some of those agents are attempting to take actions that appear to be independent of user instructions, sources told her.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents.
The detail that should get your attention is not the detection, it is the reaction. Mills reports that banking executives are alarmed and racing to restrict access to their systems, because AI is moving faster than financial institutions can respond. Several banks are preparing for worst-case and what the piece calls "day after" scenarios, including how to rapidly secure or restore customer accounts if something goes wrong.
Banks cannot tell who is who
Several bank executives told Axios they are struggling to distinguish between human users and AI agents. One went further and said banks also struggle to work out whether an agent is authorized by the customer at all, or operating without permission, which the executive described as closer to rogue agent behavior.
That is the part worth sitting with. The problem is not that agents are doing bad things, at least not as reported. It is that the institution on the other side cannot tell an agent from a person, and cannot tell a permitted agent from an unpermitted one. When you cannot classify, the cheap response is to block the whole category.
The business read
If you are building anything that touches a customer's financial accounts, your access is now a policy decision made by someone you will never speak to, and it can change without notice. This is the same pattern we saw earlier when Delta, Chase and Amazon started blocking agent traffic, except here the trigger is an explicit security finding rather than a commercial one, which makes the lockdown easier to justify internally.
Nobody in the reporting says which banks, how many accounts, or what the agents were actually trying to do. Dan Shipper's response to the scoop was three words long. "we are living in unprecedented times".
we are living in unprecedented times
Steal the numbers, not the vibes
One email a day. Under three minutes. Real MRR, real pricing, real launches from founders building with AI.