As AI-powered assistants become more capable of handling everyday tasks, Bank of America is reminding customers of an important security rule: never share your banking username or password with an AI chatbot or automated agent.
The financial institution recently sent an email to customers titled “Protecting Your Finances in the AI World,” warning them against giving their login credentials to other people, external services, or AI-powered tools that claim they can manage financial activities on their behalf.
The warning comes as more people experiment with personal AI assistants that can interact with websites, access online services, and perform tasks automatically.
Why Sharing Banking Credentials With AI Is Risky
AI agents are increasingly being designed to handle tasks that traditionally required users to navigate websites and applications themselves. Some can browse the internet, complete forms, manage subscriptions, and even make purchases.
However, giving these tools direct access to a bank account introduces serious security risks.
An AI assistant with access to banking credentials could potentially perform financial activities without the account holder fully understanding what is happening. Even when an agent is designed to follow instructions, unexpected behavior or technical errors could create problems.
There is also the possibility of triggering a bank’s fraud detection systems. Unusual login activity or automated access may cause a financial institution to flag an account, temporarily restrict transactions, or lock the customer out.
Perhaps the biggest concern is credential exposure. If an AI service experiences a security vulnerability or data breach, information shared with the assistant could potentially fall into the wrong hands.
Banks Are Still Figuring Out How AI Agents Should Access Accounts
The warning highlights a growing challenge for the financial industry.
Banks and payment companies are exploring ways to support AI-powered services that can help customers manage money, compare prices, and complete transactions.
One emerging concept is agentic payments, where users authorize AI agents to purchase products or services automatically based on specific instructions. For example, an assistant might monitor prices and complete a purchase when an item becomes available at the desired price.
While these capabilities could make financial tasks more convenient, banks still need reliable ways to verify permissions, prevent unauthorized transactions, and maintain control over account access.
Reports of automated agents attempting to access customer accounts without proper authorization have added to these concerns.
Customers Could Be Responsible for Unauthorized Activity
Bank of America has confirmed that the warning email circulating online is genuine.
The bank also reminded customers that sharing their login information can have consequences under its account agreements.
In particular, customers may be held responsible for activity resulting from access they voluntarily provide to another person or service.
This means that giving an AI assistant your banking password could create complications if something goes wrong. Recovering access, disputing transactions, or determining responsibility may become more difficult.
Customers should therefore be cautious about any service that requests their complete banking credentials, regardless of how convenient its features appear.
The Future of AI-Powered Banking Needs Better Security
AI assistants could eventually become useful tools for managing personal finances, paying bills, tracking spending, and making purchases. However, these services need safer ways to connect with financial accounts.
Rather than sharing passwords directly, future systems will need to rely on secure authorization methods that allow customers to control exactly what an AI agent can access and which actions it can perform.
Banks will also need safeguards such as transaction limits, explicit approval requirements, and the ability to revoke an agent’s permissions.
For now, Bank of America’s message is straightforward: keep your banking credentials private, even from AI assistants that promise to make your financial life easier.
The convenience of automated banking isn’t worth putting your account and personal finances at unnecessary risk.
