Bank of America told customers not to hand their login to an AI assistant

A genuine Bank of America email, confirmed by a spokesperson and reported by TechCrunch on 27 October, tells customers not to share usernames and passwords with anyone, AI tools included. The bank warns an assistant could act on an account unnoticed or trigger fraud flags that lock the customer out. It says customers are responsible for activity from that access.

If your AI agent logs into bank accounts with a stored password, a large US bank has just told your users the risk is theirs. Expect lockouts, disputes and support tickets.

If your product acts inside bank accounts, stop asking for passwords and use the bank's own authorization flow where one exists. Tell users plainly who carries the liability.