SKN | Bank of America Warns Against Sharing Banking Credentials With AI Agents

Key Points

• Bank of America has warned customers not to share banking usernames and passwords with AI-enabled tools or agents that offer to act on their behalf.
• Sharing credentials with AI assistants can expose customers to unauthorized transactions, account restrictions and potential credential theft if an AI service experiences a security breach.
• As banks explore AI-driven payments and automated financial services, secure account access, customer accountability and clear authorization frameworks remain central challenges.

Bank of America Highlights Risks From AI Banking Access

Bank of America has reminded customers to protect their banking credentials as AI assistants become more capable of performing tasks on users’ behalf. In an email titled “Protecting your finances in the AI World,” the bank advised customers never to share their usernames or passwords with another person or an external service, including AI-enabled tools and agents.

A bank spokesperson confirmed the authenticity of the email after it circulated on social media.

The warning reflects a growing tension in financial technology. AI agents are increasingly being designed to interact with digital services, but allowing them to access financial accounts through shared login credentials introduces security and accountability concerns.

An AI assistant with access to banking credentials could potentially initiate actions without the customer’s full awareness. The bank might also interpret unexpected access patterns as suspicious activity and restrict the account. A security vulnerability in the AI service could expose credentials to unauthorized parties, creating another route for financial fraud.

The Challenge of AI-Driven Financial Services

Financial institutions and payment providers are exploring how AI agents could support automated purchases, payment execution and other financial tasks. Such systems could eventually allow customers to delegate selected activities, such as purchasing products when specified prices or conditions are met.

However, the infrastructure required to support these services safely is still developing. Banks must distinguish legitimate, customer-authorized activity from unauthorized access while maintaining control over authentication, transaction approval and fraud prevention.

The reported concerns extend beyond the possibility of an AI assistant making an unintended purchase. Sharing credentials may also affect the allocation of responsibility when a transaction is disputed. Bank of America’s warning emphasizes that customers could be held responsible for activity resulting from access they have voluntarily provided.

The precise allocation of liability depends on the relevant account agreement, applicable law and circumstances of the transaction. Nevertheless, the warning underscores the importance of understanding the conditions governing access to financial accounts.

Security, Authorization and Customer Accountability

The central issue is the difference between delegating a task and handing over unrestricted account credentials. A customer may intend to authorize an AI agent to perform a limited action, but sharing a username and password can provide broader access than the intended task requires.

For banks and technology providers, safer adoption of AI-driven financial services will depend on reliable authentication, clearly defined permissions, transaction controls and effective monitoring. Customers also need transparent information about what an agent can access, which actions it may perform and how those actions can be reviewed or revoked.

Until appropriate authorization mechanisms are available and supported by the relevant financial institution, customers should avoid providing banking passwords to external AI tools. Any service claiming to operate on a customer’s behalf should be assessed against the bank’s official security guidance and approved access methods.

Closing Insights

Bank of America’s warning illustrates a practical challenge facing digital banking: convenience through automation must be balanced against account security and clear responsibility for financial activity.

For consumers, executives and wealth holders, protecting banking credentials remains a fundamental safeguard. AI tools may offer operational benefits, but access to financial accounts should be granted only through secure, institution-approved mechanisms that limit permissions and preserve meaningful customer oversight.

For financial institutions, the broader challenge is to support innovation without weakening authentication, fraud controls or customer protection as AI agents become more integrated into financial services.

For a confidential discussion regarding retail banking strategy, insurance distribution models, customer loyalty ecosystems, digital financial services, or cross-border financial innovation opportunities, contact our senior advisory team.