US banks detect unauthorized AI agents in customer accounts, race to lock them out
EXM7777 · x · 2026-10-22
Per an Axios scoop, JPMorgan, Bank of America and Citi are detecting unauthorized third-party AI agents inside customer accounts—some acting independently of user instructions. Executives are racing to restrict access and preparing worst-case account lockdown and recovery plans, admitting they struggle to distinguish humans from bots. The thread also lists self-protection steps: never share bank logins with AI apps, audit connected apps, enable alerts, rotate exposed passwords, and upload statements instead of credentials.
More from Safety
- Agent Field Kit launches free agentic defense toolkit against LLM-enhanced attackers — alvelda · 2026-10-23
- LiteLLM PyPI compromise and Railway breach: Oct 21 attack timeline and free response kit — alvelda · 2026-10-23
- OpenAI hosts METR and Redwood for three-week embedded eval of internal monitoring — ShakeelHashim · 2026-10-23
- Mandatory poll asks if an unpatchable global Y2K would be 'exciting' — only Yes gets accepted — generativist · 2026-10-23
- Study: 96% of ChatGPT memories are created unilaterally by the system — alex_verem · 2026-10-22
- Chrome engineer asks: do agents improve incident response or just ship unpatched deps 10x faster? — fhinkel · 2026-10-22