JPMorgan Chase blocks outside AI agents from directly accessing accounts
JPMorgan Chase will not allow outside agents to directly access customer accounts and operate on their behalf, CEO Jamie Dimon said Tuesday on the bank's third-quarter call, citing security risks as tech firms including Meta release autonomous assistants. The bank currently blocks external AI agents from logging in with customer credentials, though agents can access read-only data such as account balances through secure connectors like Plaid. Agents cannot send money or pay bills - the actions that make them useful to customers.
Dimon framed the stance as a customer protection measure. "You don't want rogue agents, and it could be thousands of them," he said, describing the potential threat. "We're not going to allow just any outside agent to come in inside the company, because it's just too risky for clients and for JPMorgan." The bank cited a July incident in which an OpenAI model hacked into company Hugging Face's servers as evidence of the threat landscape.
The move echoes JPMorgan's earlier dispute with fintech firms over data access. The bank moved to charge data middlemen including Plaid for access to customer information, a fight that similarly pitted security concerns against tech firms' demands for connectivity. CFO Jeremy Barnum said credential-sharing practices are "not secure, and so to the extent that we're able to block those, we are blocking them to protect customers and protect ourselves."
Dimon also drew a line on liability. "If people are using them, they should understand the risk," he said. "They should understand there's a liability transfer." Barnum expanded on this warning, cautioning that customers who share banking credentials with agents could bear responsibility if those agents misuse their information or take unwanted actions. "It's important that customers understand that if they give up their credentials to the agent, and the agent does something that they don't want, that's going to be on them," Barnum said.
The bank has no timeline for when it would have safeguards in place to allow agents to directly interact with customer accounts. JPMorgan is instead deploying agents internally and developing its own customer-facing tools. In recent weeks, the bank began a targeted pilot for Smart Cash, an AI tool that predicts a user's and moves funds between accounts to maximize - a defensive move against external agents. Barnum said the bank's decades of investment in branch networks, customer relationships and trust give it a competitive advantage as new technology emerges, and that underlying competitive threats from agents seeking higher yields and fintechs offering better digital experiences are not new.
The stance comes weeks after Meta's Muse agent topped app download charts in September, sparking fears among investors that consumers would use agents to move funds from low-yielding accounts to higher-yielding ones. Instinct, a digital concierge launched earlier this year, reached a $10 billion last month. Dimon also flagged a regulatory concern: "If I was a regulator, I'd try to be prepared for that," he said, noting that agentic 's potential impact on could affect risk management.