Financial giant Bank of America ( Bank of America ) is reminding customers to use banking services safely, and it is best not to hand over their bank credentials to AI agents.
In an email sent to customers titled “Protecting your finances in the Al World”, customers are urged not to share their usernames and passwords with anyone or any external services, “including the AI enabling tools or agents that may act on your behalf.”
The person sending the email almost manages to convey a sense of helplessness. Nevertheless, as personal AI assistants become increasingly popular, more and more customers are providing their login information. Sharing bank usernames and passwords with AI assistants carries risks; such actions could lead to unauthorized transactions on your account without your knowledge, or the bank might assume that someone is attempting to steal from it and lock it down. Worse still, security vulnerabilities in AI assistants could result in the leakage of banking credentials to other parties, giving hackers with financial motives the opportunity to access your bank accounts.
At the time of this latest warning, the banking industry is still exploring how AI proxies can be integrated into the financial world, but it is reported that they are also dealing with the issue of unauthorized proxies accessing customer funds. As we discussed on the TechCrunch Disrupt platform, banks, payment service providers, and processing institutions are still working to figure out how to allow customers to use AI tools to access their bank accounts, such as proxy-based payments, which enable people to set up proxies to automatically purchase goods at the right price or at the right time.
Bank of America did not immediately respond to requests for comment on this email. However, it is still advisable to heed the bank's warning, as once a problem arises, the responsibility lies with you. The account agreements of most banks stipulate that customers are responsible for any actions resulting from authorizing others to use their login information. The bank's email states: "If you have indeed shared your credentials, please remember that you are responsible for the activities that result from that access."
(via Bryan Toporek )
