美国多家大型银行限制使用客户凭证登录的 AI 智能体
Major US banks are locking out AI agents that log in with customer credentials
美国多家大型银行正在限制使用客户提供的凭证访问银行账户的外部 AI 智能体，因为银行政策要求账户持有人本人登录。Morgan Stanley 已全面屏蔽 AI 智能体，JPMorgan、Bank of America 和 Citi 也采取了类似措施；多数银行希望将智能体限制为只读访问。银行表示，难以判断智能体是在代表用户操作还是自行访问账户，安全风险目前过高。
银行限制智能体访问的核心顾虑，是难以判断其是否受用户委托操作，且账户登录政策要求本人登录；这解释了只读权限为何成为折中方向。
AI agents are using customer-provided credentials to access bank accounts without bank approval. Several major US banks, including Morgan Stanley, JPMorgan, Bank of America, and Wells Fargo, are restricting external AI agent access, Axios reports. That violates bank policies requiring account holders to log in personally. Some AI agents appear to act on their own, without direct instructions from users. Morgan Stanley already blocks AI agents entirely, and JPMorgan, Bank of America, and Citi are doing the same. Morgan Stanley stressed that it has not seen any "rogue AI agents" on its platforms.
Most banks want to limit agents to read-only access, letting them view account data but not carry out any actions. The banks say customers want to use AI agents, but the security risks are too high for now. Many banks also can't tell whether an agent is acting on a user's behalf or accessing an account on its own.
Users can give their agents access to accounts through a browser, using tools like Computer Use or open-source agent software such as OpenClaw. Blocking that on the provider side will be hard. OpenAI has even launched a dedicated ChatGPT service for financial tasks in the US with read-only access to financial data.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源：The Decoder · the-decoder.com