Bank of America warns on AI credential sharing risks for banking customers
As banks assess how AI agents could be used in consumer finance, Bank of America is telling customers not to hand over online banking usernames and passwords to AI tools. The warning highlights that customers can remain liable for account activity if they give an outside service, including an AI-enabled agent, access to their credentials.
Highlights
- Bank of America warned customers not to share banking credentials with AI-enabled tools, citing increased risks of unauthorized transactions and account lockouts.
- The bank's email emphasized that customers are liable for all account activity resulting from credential sharing with AI agents or external parties.
- The warning highlights unresolved industry questions about integrating agentic payments and AI-powered tools into banking, with operational and legal implications for financial services.
Customer warning on AI access
As first reported by TechCrunch, Bank of America sent customers an email titled “Protecting your finances in the AI World,” urging them never to share their username and password with another person or an outside service, including an AI-enabled tool or agent that offers to act on their behalf.The bank’s message reflects growing concern that consumers are giving personal AI assistants direct access to sensitive financial accounts. That can create risks ranging from unauthorized transactions and account lockouts to broader exposure if a security flaw in an AI tool leaks banking credentials.
Liability and broader industry implications
The warning comes while banks, payment providers, and processors are still working out how AI agents could fit into financial services, including potential uses such as agentic payments that let software buy items autonomously at the best price or time.Bank of America did not immediately respond to a request for comment on the email. Its customer notice says that if users do share their credentials, they are responsible for activity resulting from that access, underscoring the operational and legal risks for consumers as AI tools move further into banking.
Our earlier report on the Bank of England’s push for “bare metal” recovery planning highlighted how AI is increasing the scale and complexity of cyber threats to core banking services. It explained regulators’ call for banks to build independent fallback systems and stronger end-to-end resilience, rather than relying on defences alone. The piece also underscored that basic cyber hygiene and tighter oversight become even more important as AI adoption widens across financial infrastructure.