JPMorgan and Wall Street Giants Block AI Agents Over Security Fears

Banks Block AI Agents From Moving Money as Crypto Pushes Ahead

Wall Street has discovered a new kind of customer it doesn’t particularly want: artificial intelligence (AI) software or agents capable of logging into bank accounts and moving money without a human touching the keyboard. JPMorgan Chase, Bank of America, Citigroup and other financial heavyweights are tightening restrictions on third-party AI agents, with unauthorized transactions firmly in their crosshairs.

The crackdown exposes a growing problem for traditional banking: Machines can increasingly operate at financial speed, but banks still depend on security systems designed around human behavior, passwords, and approvals.

Wall Street Draws the Line on Autonomous Banking

Reports published this week describe how major U.S. banks have detected third-party AI agents accessing customer accounts, sometimes using credentials voluntarily supplied by account holders. The catch? A legitimate password doesn’t necessarily mean the account owner approved every subsequent action. Citigroup has explicitly prohibited unauthorized third-party agents from logging in or transacting directly through its digital platforms, while permitting certain approved read-only connections.

JPMorgan CEO Jamie Dimon sounded the alarm during the bank’s Oct. 13 earnings call, warning against allowing unrestricted outside agents into banking systems because of the risks to customers and the institution. Bank of America CEO Brian Moynihan has likewise emphasized human authorization for outgoing payments. Wells Fargo’s updated access agreement, scheduled for Nov. 24, distinguishes between viewing financial information and conducting transactions. The banking industry’s emerging compromise is straightforward: Let approved software examine account information, but don’t hand it the keys to the vault.

Crypto Advocates See an Opening

Binance founder Changpeng Zhao has repeatedly argued that autonomous agents will increasingly bypass traditional finance (TradFi) institutions in favor of cryptocurrency networks. His reasoning centers on speed and accessibility. AI agents don’t naturally fit systems requiring facial recognition, SMS verification, business-hour processing and conventional account applications.

Cryptocurrency wallets, by comparison, can execute programmable transactions continuously, provided their operators control the necessary cryptographic keys. Zhao has suggested that machine-driven payments could eventually dwarf human transaction volumes, potentially reaching one million times their frequency.

Token Narratives Host David Sencil Warns That Aging Banks Face a Bigger Threat

During this week’s Bitcoin.com News’ Token Narratives podcast, David Sencil raised another concern: Artificial intelligence could expose security weaknesses throughout traditional financial infrastructure. Sencil recounted an interview with Gauntlet’s Tarun Chitra, who warned that a major TradFi institution could eventually suffer a devastating breach.

“He said when a traditional finance bank gets hacked, and it’s almost inevitable because of the technology stack is so old,” Sencil explained, pointing to outdated systems that have escaped modernization. Sencil delivered the prediction’s most provocative conclusion:

“It’s going to make anything that’s happened in crypto look like play money.”

An AI Bank Breach Could Make a Blockchain Rollback Look Simple

Consider a hypothetical scenario in which autonomous AI agents compromise half the critical infrastructure of one of America’s largest banks, infiltrating payment systems, internal ledgers, and transaction authorization mechanisms. Millions of unauthorized transfers could potentially occur before security teams can even try to contain the intrusion, forcing the institution to suspend services while investigators determine which transactions are legitimate. The resulting disruption could spread across payment processors, financial counterparties, and international banking networks.

Unlike a blockchain network capable of reverting to an earlier transaction state, a major bank cannot simply rewind its interconnected financial infrastructure. Some payments might have already been settled through the Federal Reserve, while others could have reached foreign institutions or been spent by unsuspecting recipients. Restoring operations could require extensive forensic investigations, transaction reconciliation, regulatory coordination, and potentially billions of dollars in recovery expenses, depending on the damage.

Crowdstrike CEO Warns AI Is Erasing the Hacker Hierarchy

Sencil’s concerns echo warnings from Crowdstrike CEO George Kurtz, who argues that AI is dismantling the traditional hierarchy of cybercriminal capabilities. Speaking in a video clip that’s gone viral on X, Kurtz described a security environment in which sophisticated hacking techniques, once largely reserved for well-funded nation-state operations, are becoming accessible to far less experienced attackers.

The Crowdstrike chief went further, declaring, “The new apex predator is the agent. What I mean by that is this is really the rise of the agent state. We hear about ‘nation state’; it’s now the agent state.”

Crowdstrike’s October intelligence findings add weight to that argument, documenting AI-assisted attacks in which autonomous systems conducted reconnaissance, stole credentials and navigated compromised networks. The firm’s researchers anticipate that declining AI operating costs could make such capabilities increasingly accessible over the next 12 months, although the sophistication of individual attacks will vary.

For banks already grappling with unauthorized AI agents, the implications extend well beyond questionable transactions. Financial institutions must now contend with a technology that can potentially operate on both sides of the security perimeter, assisting legitimate customers while giving attackers increasingly powerful tools.

The irony is difficult to miss: Banks are scrambling to keep autonomous agents from moving money, while cybersecurity executives warn that the same technology is making the people trying to steal it considerably more dangerous.