Major US Banks Block AI Agents: Can AI Touch Your Money?

JPMorgan Chase, Citibank, Bank of America, Charles Schwab — when these names appear together, it usually signals which way the financial world is heading. Recently, they all did the same thing: they shut AI agents out of customer accounts.

This isn't an isolated decision by any single bank — it's a collective shift in how the entire industry views AI agents. As people start handing over their login credentials to AI so it can transfer money, pay bills, and even operate accounts "as them," banks have chosen to close the door.

How It Happened

According to an analysis by the YouTube channel Kaldura, it started simply enough: users voluntarily handed their account login credentials to AI agents. These AI agents can mimic human behavior — logging into online banking, checking balances, initiating transfers, paying bills — the process is nearly indistinguishable from a real person.

The problem is that banks' risk control systems were never designed for "non-human operators." When an AI agent logs in with your username and password, the system sees you. It doesn't get tired, doesn't hesitate, and can complete multiple transactions in seconds. This kind of "perfectly compliant" operation is exactly the risk banks find hardest to distinguish.

So the blocking began. One after another, quietly. No grand announcements, no detailed explanations for users — the doors just closed, one by one.

An AI agent is a software system capable of autonomously perceiving its environment, making decisions, and executing actions. Unlike chatbots that merely answer questions, it can call tools, browse the web, fill out forms, and even complete multi-step operations. In financial scenarios, users typically use browser automation or dedicated agent frameworks to hand login credentials to AI agents, enabling them to simulate human clicks and typing. From the bank system's perspective, these operations are nearly indistinguishable from a real person, because requests come from the same IP, use the same credentials, and follow similar paths. This "behavioral emulation" is precisely what makes it hard for risk control systems to detect: traditional risk control relies on device fingerprints, behavioral biometrics, and other signals, but AI agents can deliberately mimic human operation rhythms to bypass rule-based detection.

Why Banks Are Blocking It

On the surface, banks are protecting users' funds. But the deeper logic is about liability: if an AI agent makes an error that causes financial loss, who's responsible? Users will say "the AI did it," AI has no legal personhood, and banks face regulatory scrutiny and reputational risk.

From a compliance perspective, US banking regulations on anti-money laundering (AML) and know-your-customer (KYC) require institutions to confirm "who is operating the account." The identity of an AI agent is ambiguous under existing frameworks — it's neither you nor an independent legal entity. This ambiguity gives banks no incentive to support it, and plenty of reason to prohibit it.

The collective action by Charles Schwab, JPMorgan Chase, Citibank, and Bank of America is essentially risk isolation: until regulations are clear, keep uncertainty outside the door.

AML (anti-money laundering) and KYC (know your customer) are two cornerstones of financial regulation. KYC requires financial institutions to verify customers' true identities before establishing a business relationship and to update customer information throughout the service period; AML requires institutions to monitor and report suspicious transactions to prevent funds from being used for money laundering or terrorist financing. The common premise of both is that institutions must be able to confirm "who is operating the account." When the operator shifts from a natural person to an AI agent, the traditional identity verification chain breaks — AI can neither provide biometrics or legal identity like a natural person, nor does it qualify to bear independent legal liability. If banks allow AI agents to operate, they must redesign identity verification and audit tracking mechanisms under existing compliance frameworks — something nearly impossible to accomplish before regulations are clarified. Therefore, blocking AI agents is not a technical "can't" but a compliance "dare not."

The Boundary Question: AI Is Like You, But It Isn't You

This incident raises a more fundamental question: if AI can operate an account exactly like you, where is the boundary between you and AI?

Technically, AI agents and human operations are nearly indistinguishable at the log level. Legally, the consequences of authorizing an AI agent currently fall on the user — but is that reasonable? If an AI agent is maliciously exploited or makes judgment errors, who pays for the loss?

Kaldura's closing line in the video is worth pondering: "If an AI can act exactly like you, where do you end and it begins?" When AI's behavioral capabilities approach yours without limit, the very definition of identity needs to be rewritten.

Legally, AI agents currently lack independent legal personhood and cannot independently bear contractual or tort liability. When users authorize AI agents to operate accounts, the law typically treats it as the user's own action, with consequences borne by the user. But this creates a paradox: if an AI agent operates without the user's knowledge or beyond the scope of authorization, should the user still bear full responsibility? Under current legal frameworks, users find it hard to prove "I didn't do this," because logs show operations coming from their account and credentials. This ambiguity in liability allocation is one of the core reasons banks choose to prohibit rather than support AI agents. If an "authorized agent" agreement is introduced in the future, it would need to clearly define the scope of agency authority, operation tracking standards, and liability allocation rules before banks could accept AI agents as legitimate operators.

What It Means for Ordinary Users

In the short term, the path to having AI agents automatically manage bank accounts is essentially blocked. Users who have already set up such tools may find logins intercepted and transactions flagged by risk control. Banks won't make grand announcements, but the door is indeed closed.

In the medium term, this gap won't stay empty forever. Once regulators provide an identity framework for AI agents, or a bank-approved "authorized agent" agreement emerges, compliant AI financial assistants may re-enter this scenario. But until then, the balance between security and convenience clearly tips toward security.

For those watching AI applications come to life, the signal is clear: the bottleneck for AI agents in financial scenarios isn't technical capability — it's trust infrastructure. Whoever can deliver solutions for identity verification, liability allocation, and audit tracking that banks can trust will be the one to open this door.