Bank of America Warns Customers Not to Share Banking Passwords With AI Assistants

The bank told customers never to share their username and password with another person or an outside service, "including an AI-enabled tool or agent that offers to act on your behalf." It also said that if customers do share credentials, they should keep in mind that they are responsible for activity resulting from that access.

Bank of America's email described several risks. Sharing banking login details with an AI assistant could let the assistant do something with the customer's finances without their knowledge, or lead the bank to suspect that someone is raiding the account and lock the customer out. A security flaw in the AI assistant could also cause it to leak banking credentials elsewhere, giving financially motivated hackers a route into the account.

The warning comes as banks are still working out how AI agents fit into financial services. TechCrunch reported that banks, payment providers and processors are still trying to determine how to let customers use AI tools to access bank accounts, including for agentic payments, which allow people to set agents to buy things autonomously at the best price or at the right time. Banks have reportedly been dealing with unauthorized agents accessing customers' money.

Bank of America did not immediately respond to a request for comment about the email, TechCrunch reported. Account agreements at most banks hold customers responsible for anyone to whom they give their login. The email repeated that position, telling customers that sharing credentials means they are responsible for activity resulting from that access.