Four Banks That Build AI Just Barred AI Agents From Customer Accounts

All four banks run their own AI programmes. Last week all four locked outside AI agents out of customer accounts.

Jamie Dimon said on JPMorgan’s third-quarter call on October 13 that the bank bars outside agents. That set the tone for the week.

Bank of America followed on October 14. CEO Brian Moynihan said a human stays in the loop before money leaves an account.

He dismissed the deposit flight risk outright. Balances kept growing, was the argument.

Citi told the Financial Times on October 16 that it blocks agents from its platform. Customers can still grant read-only access through open banking providers.

Schwab moved the same day. CEO Rick Wurster told Bloomberg TV the firm blocks agents weekly, in the tens and twenties.

Wells Fargo did it in writing. It rewrote its terms to address third-party AI tools.

Executives warned Fed officials about agents in the same week. Supervisors privately welcomed the bans, per the Financial Times.

The named target is Meta’s Muse, a personal AI agent launched in September. It reads bank data through a data connection and cannot yet move money.

Read that timing again. The banks moved before the tool could.

The arithmetic explains the week better than any quote does.

The average US checking account pays about 0.1%. Fintech and online accounts pay 3.3% to 5.0%.

Those figures come from Apollo economist Torsten Slok’s September 27 note. The same note supplied the number that matters.

JPMorgan, Bank of America and Wells Fargo hold roughly $1.6 trillion in deposits paying no interest. Repricing that at 3% costs about $47 billion a year.

That is close to half their combined profit. Not a margin problem, an existential one.

Now the mechanism. An agent that checks rates and moves cash forces that bill.

Nothing about it requires new technology. It requires only that somebody stops forgetting.

Inertia is the asset being defended here. It sits on no balance sheet and it has exactly one defender, which is the bank’s own terms of service.

That is what got rewritten last week.

The banks are not against AI. The distinction is ownership.

Bank of America runs 130 AI projects. They saved $300 million this year, per the October 14 call.

Schwab announced its own tool, Charley, in September. Citi introduced an agent platform called ARC during 2026.

So the wall runs against outside agents, not against models the bank controls. Read-only access through open banking stays open at Citi.

That is the shape of the fight. Not whether agents touch accounts, but whose agent does.

A bank-owned assistant optimising a customer’s cash has one obvious instruction. Keep it here.

No binding US rule covers AI agents in banking. That is the gap the terms of service are filling.

Joint US guidance on AI model risk from April 2026 carved agents out of scope. Supervisors wrote the rules for models, not for software that acts.

The Financial Stability Board published final guidance on agents on October 15. It said agents do not reason like humans, and that risky actions need human checks.

One edit is the tell. The FSB dropped its earlier label for agents, “synthetic employees”.

That phrase implied an employment relationship and an accountable employer. Removing it leaves the accountability question open.

So the banks are writing the rule privately. Contract terms are doing the work a regulation has not been written to do.

That works until someone litigates it. A customer told they may not use their own software on their own account is a case waiting for a plaintiff.

Legacy fee pool compression is the metric, and it moved toward the incumbents this week. The $1.6 trillion non-interest deposit pool held.

No model appears on the bank side of this story. The defence is a contract clause, not a system.

The crossover line gets nothing. Blocking is not adoption.

Watch the fourth-quarter deposit beta numbers. That is where this stops being an argument and becomes a disclosure.

Watch for the first bank to go the other way. One large institution opening agent access as a differentiator breaks the line.

Watch the open banking rules hardest. Read-only access is the crack in the wall, and payment initiation is what sits on the other side of it.

Territory: +incumbents on the deposit.

Four banks closed the door on outside agents, and the $1.6 trillion non-interest deposit pool held for another quarter.