JPMorgan Blocks External AI Agents From Customer Accounts

JPMorgan Chase will block external AI agents from logging in to or operating customer accounts, Chief Executive Jamie Dimon said during the bank’s third-quarter earnings call on Tuesday. He said the bank would not allow arbitrary outside agents into its systems because an “out-of-control agent” could create risks for both customers and JPMorgan.

The decision highlights the trade-off banks face between expanding access to financial data and retaining control over account access. It also underscores a growing divide between traditional financial institutions and consumer-facing AI assistants over how those services should connect to banking platforms.

JPMorgan flags the risks of shared credentials

AI agents are software tools that can carry out tasks on a user’s behalf, such as checking an account balance or booking travel. If an agent logs in using a customer’s banking credentials, it may be able to view account information or take actions on the customer’s behalf.

JPMorgan said it would not permit external AI agents to access accounts in that way and would block third-party agents that attempt to obtain customers’ bank login credentials. Dimon said the bank did not intend to let any outside agent enter its systems because the risks were “too great” for customers and JPMorgan. Customers, he added, would not want to deal with an agent that had become uncontrollable.

His comments focused on whether an agent’s permissions and behavior can be controlled, rather than rejecting customers’ use of AI tools altogether.

Customer-authorized data sharing remains available

JPMorgan’s restriction does not amount to a blanket suspension of customer-authorized data sharing. The bank continues to support sharing through open-banking service providers when customers give permission.

The distinction is between an external agent directly using account credentials to log in or take action and a data-sharing provider transmitting information that the customer has authorized. For financial institutions, the difference affects how customer data is accessed, whether an agent can act for the customer, and who may be responsible if an error or unauthorized action occurs.

By limiting direct access for external agents while retaining authorized data sharing, JPMorgan is drawing a boundary between connecting customers with third-party services and preserving control over their accounts.

Meta products point to demand for financial access

Meta’s Muse can connect to financial accounts through Plaid, while Meta is developing a tool called Poppy to identify agents. The products illustrate how technology companies are seeking to connect AI services with users’ financial data and account-related tasks, while banks assess the security and liability issues that may result.

JPMorgan’s statement currently addresses external AI agents logging in to or operating customer accounts. The bank has not announced an end to customer-authorized data sharing through open-banking providers.

The available information does not specify how the risks described by Dimon would apply to different agent products, or how JPMorgan would determine whether an agent is “external” or “out of control.”