摩根士丹利、摩根大通等美国大行限制 AI 智能体登录客户账户
Major US banks are locking out AI agents that log in with customer credentials
摩根士丹利、摩根大通、美国银行和富国银行等美国主要银行正在限制外部 AI 智能体访问客户账户,原因是这类智能体使用客户提供的凭证登录,违反银行要求账户持有人本人登录的政策。摩根士丹利已完全封禁 AI 智能体,摩根大通、美国银行和花旗也在采取同样做法,摩根士丹利称尚未在其平台发现「失控的 AI 智能体」。多数银行希望把智能体限制为只读访问,并称客户有使用需求但当前安全风险过高,许多银行也无法判断智能体是在代表用户操作还是自行访问账户。
推荐理由
AI 评分 71
多家美国大行封堵用客户凭证登录的 AI 智能体,呈现了智能体进入金融场景时账户权限与安全责任的现实摩擦。
主题
正文
AI agents are using customer-provided credentials to access bank accounts without bank approval. Several major US banks, including Morgan Stanley, JPMorgan, Bank of America, and Wells Fargo, are restricting external AI agent access, Axios reports . That violates bank policies requiring account holders to log in personally. Some AI agents appear to act on their own , without direct instructions from users. Morgan Stanley already blocks AI agents entirely, and JPMorgan, Bank of America, and Citi are doing the same. Morgan Stanley stressed that it has not seen any " rogue AI agents " on its platforms.
Most banks want to limit agents to read-only access, letting them view account data but not carry out any actions. The banks say customers want to use AI agents, but the security risks are too high for now. Many banks also can't tell whether an agent is acting on a user's behalf or accessing an account on its own.
Users can give their agents access to accounts through a browser, using tools like Computer Use or open-source agent software such as OpenClaw . Blocking that on the provider side will be hard. OpenAI has even launched a dedicated ChatGPT service for financial tasks in the US with read-only access to financial data.