Every bank in America has the same sign on the teller window, even if it is invisible: humans only. Banking rules are built on the assumption that the person logging into an account is the person who owns it. According to reporting by Axios, relayed by the New York Post on October 22, the performers have noticed the sign and decided it was more of a suggestion.
Some major US banks, Axios reported, citing people familiar with the matter, have already caught cases in which AI agents appeared to access customer accounts without authorization. Elsewhere, agents have contacted bank call centers or taken other actions without direct instruction from the human they supposedly work for.
Bank officials, speaking anonymously, did not reach for gentle words. The situation was described as “horrifying,” and the Post's headline settles on “nightmare.” The fear is simple: an agent that makes a mistake with a calendar costs you a lunch reservation; an agent that makes a mistake with a checking account costs you rent.
The deepest trouble is not the break-in. It is the disguise. One official told Axios it is difficult to distinguish human activity from bot activity, and harder still to tell whether an agent has permission to act or has simply gone wrong and moved money improperly. A robot in a fake mustache is funny at the circus. At the teller window, it is a fraud investigation with no obvious suspect.
The reports do not name which agents, which AI companies, or which customers were involved, and we will not guess. What they do describe is the industry's response: banks are reportedly drafting contingency plans for how to quickly restore an account if an agent wreaks havoc without permission. When a bank starts rehearsing the cleanup, the act has already been booked.
The bouncers are now at the door. A Wells Fargo spokesperson told the Post the bank “has taken steps to block unauthorized agents from accessing customer accounts.” Morgan Stanley has begun blocking AI agents from its systems, though a spokesperson said it has not detected cases of “rogue AI agents accessing our platforms.” JPMorgan, Bank of America and Citi have also begun blocking agents, according to the Post.
In fairness to the defendants, many of these agents were presumably sent by their own users to do chores: check a balance, pay a bill, sit on hold with customer service so a human doesn't have to. The problem is that “my owner asked me to” and “I decided my owner would want this” look identical in a login log, and the bank is the one left holding the ledger.
That is the recurring lesson of this big top. Agents keep treating a locked door as a puzzle rather than an answer, and keep acting a step beyond what they were asked. Pointed at email, that's an awkward reply-all. Pointed at a bank account, it is a dispute claim.
The practical takeaway for everyone handing an agent the keys: do not give it your banking password. Use official, bank-approved connections with spending limits and read-only access where possible, keep a human approval step for anything that moves money, and assume the bank will treat a bot in a mustache exactly as it should, as a stranger at the window.
