Bank of America asks customers not to hand their banking password to an AI assistant

Bank of America is asking customers not to give their banking passwords to AI assistants. In guidance reported by TechCrunch on October 27, the bank reminded customers that they are responsible for activity resulting from an AI agent's access to their accounts.

The wording the bank uses is compact: "you're responsible for activity." In effect, the bank is drawing a line: if a customer hands account access to an AI agent, the consequences of that decision sit with the customer rather than with the institution.

The warning arrives as agentic AI tools move from demos into everyday chores. Consumers increasingly delegate email triage, price comparisons, subscription renewals and even payments to general-purpose assistants, and for those tools to act on a bank account they typically need credentials or some form of long-lived authorization.

For banks, credential sharing strains two arrangements at once. Account agreements generally require customers to safeguard their login details, and fraud monitoring and liability rules assume that whoever is using the credentials is the account holder or someone the holder has vouched for.

The emphasis falls on customer responsibility rather than on any specific technical control. The notice does not describe how a customer is meant to supervise an agent that already holds their password, nor which permissions could be granted instead, which makes it read more like a risk disclosure than an operating manual.

The larger question is how authorization should be designed. If agents are to be trusted with money movement, the industry discussion points toward scoped, revocable and auditable permissions instead of full password handover. Consumer banking has not settled on such a standard, and there is no common cross-institution approach yet.

Two things are worth watching: whether other banks issue similar customer guidance, and whether regulators and payment networks write explicit liability rules for transactions initiated by an agent. Until then, handing a banking password to an assistant remains a decision whose downside belongs to the user.