Bank of America kindly asks that you don’t share your banking password with your AI assistant
- ID
- 40168
- Status
- summarized
- Published
- 28 Oct 2026, 5:44 AM
- Fetched
- 28 Oct 2026, 6:08 AM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/10/27/bank-of-america-kindly-asks-that-you-dont-share-your-banking-password-with-your-ai-assistant/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 6.0
- Created
- 28 Oct 2026, 6:09 AM
- Tags
- Audience
- developersai_agent_userssaas_startup_founders
What happened
Bank of America sent customers an email titled "Protecting your finances in the AI World" telling them never to share their username and password with another person or outside service, "including an AI-enabled tool or agent that offers to act on your behalf." The warning lands as banks, payment providers, and processors are still working out how to support agentic payments, and TechCrunch reports banks are grappling with unauthorized agents accessing customer money. BofA did not respond to a request for comment; the article notes most bank account agreements make customers responsible for anyone they hand their login to.
Why it matters
If you are building or recommending any agent that logs into a bank on a user's behalf, this is a direct signal that credential-sharing is the wrong integration path: the account agreement puts liability on the user, and the bank may lock the account or treat agent activity as fraud. The practical decision is to design around sanctioned access (bank-issued APIs, open banking, card network agentic-payment rails) rather than asking users to paste a password into your tool — there is no Malaysian-specific detail in this text, so local impact depends on which local banks and payment rails you integrate with.
Discussion angle
Ask the room: if a user hands your agent their banking login and it moves money wrongly, who eats the loss — and does your onboarding flow make that liability clear before they type the password?