Canadian banks block third-party AI agents over online banking security risks

Traders Union
All News
Financial Institutions
Canadian banks block AI agents

Highlights

RBC, BMO, TD Bank, and CIBC are blocking third-party AI agents from accessing digital banking platforms or executing account-related actions as of June 2024.
Scotiabank and National Bank are limiting or closely monitoring third-party AI agent access, citing ongoing concerns over security, trust, and data protection.
Canadian banks' decisions signal industry-wide caution regarding AI agents, prioritizing protection of authenticated systems, customer data, and transaction integrity over AI adoption in retail banking.

Bank restrictions on AI access

As reported by Moneysense, several major Canadian banks are moving to prevent third-party personal AI agents from accessing online banking platforms or carrying out account-related actions.

RBC spokesperson Jeff Lanthier said in a statement on Wednesday that the bank has decided to block third-party personal AI agents from direct access to authenticated RBC digital properties, including online banking. RBC CEO Dave McKay said in a LinkedIn post on Tuesday evening that while the bank recognizes AI's potential to save time, the security of client information remains the top priority.

BMO spokesperson John Fenton also said in a statement that the bank does not permit AI agents to access its digital properties or execute transactions in order to protect clients. TD Bank has said it has made the same decision, while CIBC said it does not support personal AI agents directly opening or accessing accounts.

Sector response and risk implications

Other lenders are taking a more cautious monitoring approach as consumer AI tools develop. National Bank said it is closely monitoring the development of consumer AI agents, while Scotiabank said it will limit third-party AI agents from its banking platforms as it reviews related concerns.

The moves show that Canadian banks are treating personal AI agents as a potential security and trust issue rather than a near-term service channel. For the banking sector, the immediate focus remains on safeguarding authenticated systems, customer information and transaction integrity as AI tools push further into consumer financial services.

In our earlier article on the Bank of England’s push for “bare metal” recovery planning, we covered regulators’ calls for banks to build independent fallback systems that can keep critical services running if core technology is compromised. The piece highlighted concerns that advances in AI are amplifying the scale and complexity of cyber attacks, prompting supervisors to demand stronger end-to-end resilience and recovery capabilities across the financial system.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.