Bank of America Asks You Not to Hand Your Bank Login to an AI Bot

Financial giant Bank of America recently sent an email blast to customers urging them never to share their usernames and passwords with an outside service, including any AI-enabled tool or agent that offers to act on their behalf. Customers are increasingly handing over their logins as personal AI assistants grow more popular, despite the steep risks involved.

Sharing credentials with an autonomous bot invites trouble, ranging from unauthorized financial actions to sudden account lockouts triggered by fraud detection systems. Worse yet, a security flaw in the assistant could leak sensitive login details to financially motivated hackers, leaving accounts wide open. This warning arrives as traditional financial institutions are still exploring how autonomous tools fit into the banking ecosystem.

Banks and payment processors are currently grappling with unauthorized agents accessing customer funds while simultaneously trying to figure out safe ways to enable agentic payments, which let software autonomously buy things at the best price or right time. Yet while the tech industry rushes toward full automation, most bank account agreements place the burden squarely on the user.

If an account holder voluntarily hands over their credentials to software, they remain entirely responsible for any resulting activity.

Our read is that this friction exposes the dangerous gap between what generative software promises and what liability rules allow.

Tech companies market AI agents as seamless personal helpers, but legacy banking contracts treat any bot given a password simply as an authorized human proxy.

That mismatch leaves everyday users holding the financial bag if things go wrong.

Watch for whether banks eventually build secure delegation protocols, or if they keep shifting the entire security burden onto customers who just want a smarter way to shop.