BofA and Citi Restrict AI Agents from Accessing Customer Accounts
nashnova research
Citi, Bank of America, and JPMorgan have moved to block third-party AI agents from customer accounts, fearing the technology could automatically sweep $1.6 trillion in zero-interest deposits into higher-yield alternatives — adding roughly $47 billion a year in interest costs.
What exactly are the big three blocking?
Citi banned third-party AI agents from logging into customer accounts or executing transactions on its digital platform, citing account and data security.
BofA CEO Brian Moynihan said a human must authorize any fund transfer and the bank is drafting rules to assign liability for AI-initiated payments.
JPMorgan CEO Jamie Dimon was blunter: "You don't want rogue agents — and there could be thousands." Until rules are clear, no outside agent gets into JPMorgan's systems.
Why would deposits move at all?
Last month Meta launched Muse, a personal AI agent — giving the deposit-migration threat a concrete product trigger. This means → AI agents are no longer hypothetical; a major tech company has shipped one.
Apollo chief economist Torsten Slok warned that AI assistants could automatically shift idle household cash into accounts paying 3.3%–5% a year — versus the 0.1% national average on U.S. checking accounts.
In plain terms = your checking account pays almost nothing; an AI can move your money to a high-yield account in one click, and the bank loses the cheap funding it has relied on.
How much is at stake for the banks?
JPMorgan, BofA, and Wells Fargo together hold roughly $1.6 trillion in non-interest-bearing deposits — about 16% of their combined liabilities.
Slok estimates that paying 3% on those balances would add roughly $47 billion a year in interest expense across the three banks.
This reflects a business model built on customer inertia — AI agents are precisely the force that breaks that inertia.
Where do regulators stand?
Regulators have privately welcomed the banks' moves but have made no formal public statement.
Two questions need legislation: ① how customers authorize autonomous AI to execute financial transactions on their behalf; ② who bears liability when something goes wrong.
Citi left one opening: customers can still grant read-only access to account data through select open-banking providers — but no transaction authority.
What comes next for the banks?
Simon-Kucher senior partner Christoph Stegmeier argued that banks must make deposit products "stickier" — expanding loyalty programs and other incentives to retain savings.
This means → blocking alone is not enough; banks need a product-level reason for customers to stay, or deposits will eventually migrate to higher-yielding alternatives.
The timeline for clear liability rules and a regulatory framework will be the key marker for how this standoff plays out.
市场有风险，内容仅供研究参考，不构成投资建议。